last executing test programs: 9.48418443s ago: executing program 2 (id=4946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x3ff, 0x4) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32844, 0xc1}}, 0x20}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x1c, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8141ba5ccf7ef84}, 0x0) 9.248692629s ago: executing program 2 (id=4950): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x8914, &(0x7f0000000000)='lapb0\x00\x00\\\x00'/39) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111da000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111da000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 9.165620159s ago: executing program 2 (id=4952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)="d9b604") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x20001040}, 0x24000840) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r7, &(0x7f00000001c0)='devlink\x00', 0x280080, &(0x7f0000000300)={@align=0x58f, {0xd594, 0xa, 0xffff, 0x2}}, 0x1, &(0x7f0000000340), &(0x7f0000000380)}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000580)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001080)={r10, 0xf, 0x9}, &(0x7f00000010c0)=0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000019000189da9bb9c60d4611022d"], 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000200)=0x14) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r13, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xc080) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xa23) 8.128675903s ago: executing program 2 (id=4962): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835efeffffffffffffff02141004fd00fe02000300"], 0x2c}, 0x1, 0xffffff7f}, 0x80) socket(0x8, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x20400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x300, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 7.108411493s ago: executing program 2 (id=4972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x5}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500001f58598f940a957700000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x100, 0xfffffff8, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xb, 0x1, 0xc38c, 0x8, 0xfff7, 0x5, 0x8, 0x400, 0x1, 0xb7, 0x3, 0x0, 0xffff, 0x6, 0x4fc, 0x6]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x80) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)="52a1086f8287a35296325945bb084d79308d2e471a6a6e4418bd337a66b0716d39a568e10a302049fa4f61dbf25766e1fecb47dbaf07961821ee4c4189bc6281b351f18e8d6a55099d375c4e96c570c3", 0x50}, {&(0x7f00000002c0)="1d782a92669594b0013713293355d1b7a93c89f8c2011f9e80683ae361903c91a69464785ac7aa015b23622bf64884ef06bc73b20c137524d79dad26fa9fefbb357078aa38d5ebd8666422231b9b4b414f6b22374d3320ea8a", 0x59}, {&(0x7f00000003c0)="8e30e8ca9da1ce904e6119e74bd4d712173121b25377d0ebeebab7b7a3b8efe8c9546ee71be67d2bd25afd6df50d4363cd69d0e7115cb52b7ff13dc77132254e33ac49ffee86b668262b5d96845c38d69a11f1596661cc21d57f25282e7b2c5783bfa614db081d195475ebe196a2bc49d1e6d974898b4112382b2cab8e7dd726059aa7fbc0a50bd9e4f1cacfdaf72305dc5e2634be1ae464b090ee3dcea08933f209815b05fb1f02a823528c8fa1b3429c76f4db095ca08b48f263e319954bf6b18c99ae90e70aaad34143e0af45f1cdba46a2d619c4a0a50af8e7d8f53f27e6ae4148c5b911a17f71df", 0xea}, {&(0x7f00000004c0)="0111f0124668d406702970c28e0d578c9baa7aee55ce8b88dc3118fc88e002c188b7c8178b5293947cc8ae135b7a58433807dc69b3b2d66b3b788a469e42e78bac060ef813cc7b954caac2af4fdeb3525755acd7902590b54ca6039362b497fc75ed12118feaf3b31b1579a3091794feb3ebd077b188060de5239ba163abe48170f05482ab6473b7f2", 0x89}, {&(0x7f0000000580)="b3e7602283f06b4241b31f73bc0bc69b7fa9a77fc2ccc93c56e0f20beb998317351a768cb508e29aeb0c7208893170d6d7c019366f04da869312f0dd8d9f7298db7d984797ee2c7229a53bf573cbe4a30525dd49c907b93057f57ab8c1", 0x5d}], 0x5, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c0004409a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.821445037s ago: executing program 2 (id=4976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x58010}, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) r2 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x26, &(0x7f0000000640)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x3}, 0x5, 0x1, 0x0, 0x0, "87fec05b53996cd2"}}}}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="aefe9193226504984bf1f2", 0xb, 0x24044001, &(0x7f0000000280)={0xa, 0x4e24, 0x80, @mcast1, 0x7f}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x1b0, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68d9483c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ID={0x35, 0x3, "3d30d15c2350f3a263d74e2424374a42b99aafb51535d00fa24e3058f070f7ad9e96457dc6a350d5b25abf49b33e29e81f"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={r7, 0x5}, &(0x7f0000000140)=0x8) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0)={r7, 0xfffd}, 0x8) write(0xffffffffffffffff, 0x0, 0x0) 3.189800973s ago: executing program 4 (id=5015): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x30, "5c76276f6c86622447097b9940a4f2781ad01612b405e66e2ebe9d615061f3ca96d04070448e9da4558e5466889627a5"}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 3.051826515s ago: executing program 4 (id=5017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff024}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x10001}}, 0x588, 0x104, 0x9, 0xc58d, 0x8}, &(0x7f0000000400)=0x98) r4 = socket$packet(0x11, 0x3, 0x300) r5 = accept4(r4, &(0x7f0000000580)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000600)=0x80, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x1d, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x68) r7 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x9, 0x4e21, 0x4, 0xa, 0x30, 0x0, 0x2, r6, r7}, {0xffffffffffffffc2, 0xfffffffffffffffe, 0x3, 0x3, 0x1, 0x400000000076, 0x0, 0xffffffffffffffff}, {0xff, 0x1, 0x80, 0x1}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x3503, 0x0, 0x0, 0x7, 0x8, 0x8, 0x5}}, 0xe8) sendmsg$nl_generic(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c00100}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x12a4, 0x33, 0x200, 0x70bd28, 0x25dfdbfd, {0x1e}, [@nested={0x170, 0x69, 0x0, 0x1, [@typed={0xc, 0xfd, 0x0, 0x0, @u64=0x3}, @generic="a1d34783a8ecf32483ce54a6e0732df9e84ae571f8fad4bf7aedd3c91d3719de40fd13244bcf345d8f5544fa4db5d4544ba41a6ab7c4c0101ca7c8324ac4a6f534f9cdc4d21732c511092208b0060b9ce4123f5515fca7a93a1750ce5a554e102c0134a1023ea86da2984aea2a2bfcfdcc5d12a4a405b369c692c3b5a296098f4654dfc00f88720dc33ffab4230a3b", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x10d, 0x0, 0x0, @binary}, @nested={0x4, 0xbc}, @generic="326a2967aca715ae72aed1ee7f0c3a52f97954019049340c5b1397bd9fd6a36426ef50dc7f9c07e51a9bf6bfee5df1f451af4ba5494a20d762d51bdb570a339bfa388126ebf7d3421544579ad0b1f697363d4cc491167cf92103016fc0ad79985f52f1946c3144f5f86d90021df37f4e674b34ff98a030227c055ce70a14f2bde355faf875c6eb67f6c664010c15e95d3c66128ee29f93707920528ac049454289a618a4c7ad006713", @nested={0x4, 0x4d}, @typed={0x14, 0xde, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @generic="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", @nested={0x106, 0x40, 0x0, 0x1, [@nested={0x4, 0x168}, @nested={0x4, 0xa5}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=r7}, @generic="bef1a9f9d24bc96c31d6b60d5314984e816c6552171c5b491d09555bd6a040f675554a965151db1cd12de36d5a1f722cb920f3afdad2ad26830f4f044bf71da9608daf2647c4fe20e3b1c0a553b0d477805654e551ce10a98aef9c18d70e6e3081690c4dd72b311f7e29158999f8847d5b9f4d857a4967e4001e459afa5b4cb06664aa348fbcbde70601856cbdd3b7fa36ab3cf724c835dba1516175ebd3c1ed730727a95af566ad85516b9d8714fd78c9b6783faa207a6f457e1cce3d1617b1293c2d8dc1a942c4e7cc185aef573112e8be1e3e01df04b08ba461756ab0d8a7ff912bea2ad0fd9522890863046b", @nested={0x4, 0xc0}]}, @nested={0x18, 0xe4, 0x0, 0x1, [@generic="a1ce37807fab37b17c340ec26e2a6515", @nested={0x4, 0x60}]}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x44}, 0x880) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 2.731260029s ago: executing program 4 (id=5020): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) unshare(0x26020480) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x9, 0x80002, 0x64}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000200000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r6}, 0x38) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x5, 0x1}, &(0x7f0000000340)=0x90) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180)=0x201, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000003c0)={r8, 0x2, 0x5}, &(0x7f0000000400)=0x8) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x6, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="e64f2be8", 0x4) 1.325965712s ago: executing program 3 (id=5025): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r3, 0x295c4ba963c367f0, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000810}, 0x2000c840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300005000008000540000000080800034000000094200009801c00028008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001004800000000000000140000001100010000000000001000000200f50900000000"], 0xf0}}, 0x0) 1.315421866s ago: executing program 1 (id=5026): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1ea, 0x7fff, 0x4}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000600000000000000ed00000018110000", @ANYRES32, @ANYBLOB="0000000000000000784d2f21a440aecfd2769140eae1c5b090f31e443425b7020000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x80000000, 0xea, &(0x7f0000000d80)=""/234, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x40, 0xffff}, 0x10, 0x3037d, r5, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x4, 0xd, 0x5}, {0x1, 0x3, 0x7, 0x2}, {0x2, 0x5, 0x200, 0x2}, {0x0, 0x4, 0x1000007, 0xc}, {0x5, 0x5, 0x7, 0x9}, {0x5, 0x1, 0x7, 0x4}, {0x5, 0x3, 0xe, 0x4}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000000) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) (async, rerun: 64) write$cgroup_int(r9, 0x0, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000740)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x9, 0xffff, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r8, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x9c, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r8, r9, 0x17, 0x0, @val=@target_btf_id=r10}, 0x14) (async, rerun: 32) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) (rerun: 32) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="03000000040000000400000a0a1d000000000000", @ANYRES32=r2, @ANYBLOB="940c00"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="04000000050000000500"/28], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x9, 0xd7, &(0x7f00000005c0)=""/215, 0x40f00, 0x30, '\x00', r7, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x7, 0xf, 0x9}, 0x10, r10, r5, 0x5, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x3, 0x5, 0x5, 0xb}, {0x2, 0x2, 0x1, 0x9}, {0x5, 0x2, 0x6, 0xa}, {0x1, 0x5, 0x0, 0x6}, {0x4, 0x4, 0x6, 0xb}], 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x9d}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.313142841s ago: executing program 3 (id=5028): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x885}, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}], 0x5}, 0x3fffff}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000065c0)={0x5d5, 0x86d2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x0, 0x1, 0xa34, 0x2, {{0x13, 0x4, 0x1, 0x2b, 0x4c, 0x67, 0x0, 0x22, 0x4, 0x0, @multicast2, @loopback, {[@noop, @ssrr={0x89, 0x7, 0xaf, [@empty]}, @noop, @rr={0x7, 0x1f, 0x4a, [@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @empty]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a000007000100000000000000000000180000000002000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', r1}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x32, @remote, 0x4e20, 0x0, 'lc\x00', 0x39, 0x9, 0xf}, {@loopback, 0x4e23, 0x10000, 0x0, 0x9, 0x800}}, 0x44) 1.312740419s ago: executing program 0 (id=5029): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000a20000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f00200100000000000000000000001b0001ff0200000000000000000000000000010000883e"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.30479185s ago: executing program 3 (id=5030): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{0x0, 0x114}], 0x1}, 0x0) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000009000000040000000400000604000000040000000704000000fcffffff0800000007000000002e713061302e5f00"], &(0x7f0000000280)=""/95, 0x4d, 0x5f, 0x1, 0x80000001}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.303424477s ago: executing program 0 (id=5031): setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x7, 0xff, 0xff}, 0xc) (async) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000100)={0x7, 0x3, 0x5}) (async, rerun: 32) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x50, r0, 0x548e8000) (rerun: 32) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x0, 0x3ff, 0x1, 0x5, 0x3, 0x4]}, &(0x7f0000000180)=0x10) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x2, 0x0, 0xffffffffffffffff, 0x10000, 0x5, 0x8, 0xf0a8, 0xfee5}], 0x1, 0x38, 0x1, 0x2}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x5, 0x7, 0x18, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x3, 0x4}}) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000800)={@loopback, @dev, 0x0}, &(0x7f0000000840)=0xc) (rerun: 32) sendmsg$inet6(r0, &(0x7f0000000c00)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000280)="f09282592c3cfff68608d265c361c6b262dba513f7b9f7a3536364c55c2c200ec76bb54d929ac0a06afac5a4ce1e9353b5a7", 0x32}, {&(0x7f00000002c0)="3a279003a811b2d8b14a68ac744583513d8a36e1f4e45b924045328baad427fdc7a86bca58e63e6d190026bb2bc29a53022adde7d995bac41f755b8527499235a5cf7b8935e5e4b30336e17bd8d2eed81daa006ad8e86da0d11f8030d79b9aa0b96583efbccd8336e6954693f94fd60fa2e730a738c519d0b46b93f5f9707fb8d5a99d0a96101ab73841ab49df1ec4eed5d9affb0c87603d07f975b05014de5fd831a4893a0484e3f38507ee15f023ee50c6705e19860e7d1f4e283a64e26bd0b45b05bd4a0d942a1620f0e5a9c381afd8a2477c41f83706a510fb7e4bd2e57726d40f7f7f23a1dea6cc40898a5bc39ebddef432d9195b3c", 0xf8}, {&(0x7f00000003c0)="ffc9b2c5f819db7e94118ec872baf244e925344c44535b90ea8b4289fd191cb7405298ee089b08dcb7a5b308dfaf8f1f9b42fb0e3bfb7f9ef72b78aeb439b3ddb0dc1bb5daf1e4d5c7853dfc523fadf281c7f17cee61f61649da8194480eb77bb8e0c76acf2965ada251d1cf6492168b06c8998c19c8f58742c79cda94e55c59078817b09f5b7948059c6a24972ce45386e97a8ba3b2d6e211af80f4cfc453fd66d2db28c1617fe5c2d8e2ff7aa24a7e311a739733efe0c4e7b12cd9c7f57aa58fb3fd15791d5b22aca1d113818b820f3df2fe0ae0991bb5df18dba5cf8ef4c7d60b9c9d8ba06680f9ca21ca9e3b7bb2597735aa2319", 0xf6}, {&(0x7f00000004c0)="e0bcf629285d4a51e380e38741dbf8dc1a7524af088736ca615ccd1fa4e4f03aad400f876f6b72b35db22e2a54845ed12981d9e8314c", 0x36}, {&(0x7f0000000500)="abc42a08928fe48a0b766aa662f2fb4155f3c8339ed2015bf1d4dad5477b48652aae509b924fcf8d290c1be59363995622eab716f1fabf5b8c5a46937663f0fe6418a8595f47a187ac6410aac5a235dbef9753c133c0e0290609f3950c1785ca226bb2c93861219b562e430c886a7acf7cb030732e5f17f79433f805a6cfd638c0b3466b62e9beaa4682d099237a55cdb514509872cf81b43562c05d3b0e9fde8a0cb8614d035b72bba1c7ed1f7708ad71b7df8a36264cef3392dd11393ea6f5d08b72", 0xc3}], 0x5, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x20}, r1}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}, @hopopts={{0x150, 0x29, 0x36, {0x6, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x27, 0xd3, "602aec58d7ba42a772bcf4a180fc5c979e00e75f98a86ef1fe09326c4c6b11278a7739998cdc41af805faf9ea390ddab18043b8f7aab14e7242943ef59cedc4620b5971e8ec9471db74396b68f296732a9539fc59652ceac40a56183381569b56c48d5cce40257300f9f10821d91ecf14b123a6f80a4011c16e347760589836419a51627152c956455beff5d57808c8f705fdce377ab7ec70d6eb499b7adc69d2f89ba16ed12f8196f365db8146a016d4d94cac194fec3fbab86428ec7cc3cc5bf4ff1cbfe56127a8137cffd3a8b368d9f05ec"}, @pad1, @generic={0x92, 0x49, "c8ac1c54d4a16cdc0b327fded93bfccdbbc270770406dbccbcc070947a624c177546401ba2f8cbfa317792c5a13a24b25e32a56285dd2db2908922bb221f4fd097eee66d8d106bb38e"}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x8c, 0xc, 0x2, 0xd, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast2, @private1, @loopback]}}}, @rthdrdstopts={{0x138, 0x29, 0x37, {0xc, 0x23, '\x00', [@pad1, @pad1, @generic={0x81, 0xfe, "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"}, @ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0xfffffffb}, @calipso={0x7, 0x8, {0x1, 0x0, 0x2, 0x7fff}}, @enc_lim={0x4, 0x1, 0x24}]}}}], 0x378}, 0x40048c0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x81020044}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x20, 0x9, @l2={'ib', 0x3a, 'batadv0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x20080001) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001080)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e40)={0x1ec, 0x17, 0xa, 0x304, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x138, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x20040890) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f00000010c0)={0x1d, r1, 0x1, {0x2, 0x1, 0x1}, 0xff}, 0x18) (async, rerun: 32) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001100)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async, rerun: 32) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000001140)={0x3c, 0xe28b, 0x4, 0xb, 0x5, 0x81}) bind(r5, &(0x7f0000001180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000001200)=0xfc, 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9f9}]}, 0x30}}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'ip6gre0\x00', r2, 0x4, 0xf, 0x6, 0x3e, 0x1c, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x417, 0x8}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001ac0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x121480}, 0xc, &(0x7f0000001a80)={&(0x7f00000014c0)={0x5ac, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x278, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0xff, 0xb6, 0xb}, {0x2, 0x9, 0xd, 0x1}, {0x3, 0x2, 0x1, 0x4}, {0x8, 0x8, 0x8, 0x8001}, {0x0, 0xce, 0x4, 0x3}, {0x8, 0x0, 0x4, 0xc0000000}, {0x7, 0x5e, 0x5, 0xffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfa9, 0xc8, 0x9, 0x4}, {0x8, 0x5, 0x3, 0x6}, {0x10, 0x4, 0xb}, {0x1b8, 0x5, 0xdd, 0xfff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89d2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa9ae}}}]}}]}, 0x5ac}}, 0x4c010) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b40), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001d00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x13c, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc74}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42fa7742}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x240}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4085}, 0x1) 1.300747754s ago: executing program 4 (id=5032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xff, 0xac, "2a0f5f35e19364d93d908a04cd6a3fe05e5d7c5f4c1fd0bea5e5a542d9b2eed0bd47029f6b3f60110f6dcbb4c02f67016ac24ff9bc8f2fe666dac10c4a8766f428a9c8cabd4f1c9e4526cb75e0412a8b2d20b0ac5890bedfffd57f4e92192f8a489df1e45db3c7a36ebbf0fc9fc53c01faa4792e2371d55e15f64a7e1fba65396aafd0a1094058e2cb79b3c545a3bb71ddbfcd5a4cba4d90ea35175a62933657d0b50fe3b6c03eb3a958eb4b10fe42b5cd56f1f6d3b2a3f0fa156f3f658766debebdf7ebe71dd4c8ba463f1dd0c77d490a81669d55b5911bc315350f90a5e397d719c8c2747a5cbd55e42c1a48ff5b12d83ab41100ccb0dc718623"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4048195}, 0x0) sendfile(r0, r0, &(0x7f0000000280)=0xaf89, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @initdev}, &(0x7f0000000300)=0xc) bind$packet(r3, &(0x7f0000000340)={0x11, 0x1a, r4, 0x1, 0x2, 0x6, @random="b26c4fac91fc"}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x6e9, 0x5, 0x1, 0x9, 0x1]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x38}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2800}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x324c}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x20000040) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x11, 0x5, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', r4, 0x2b, 0x8, 0xe, 0x0, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x700, 0x2e8}}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r8, 0x25, 0x0, @void}, 0x10) r10 = socket(0xb, 0x0, 0x10) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, r1, 0x2, 0xcf8, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x100, 0xb]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x639}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x8, 0x0, 0xc98, 0x2, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x8]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@mcast2, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x1, 0xf, 0xa, 0x0, 0xc0, 0x73, r8, 0xee00}, {0x100000000, 0xff, 0xe, 0x8000, 0x6, 0xe924, 0xd, 0xe}, {0x9, 0x5, 0xff, 0x5}, 0x7fff, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0xff}, 0x2, @in6=@mcast1, 0x0, 0x3, 0x1238960245a1a803, 0x0, 0x1, 0x3c8, 0x6}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x10, 0xd, 0x46, 0x1208, 0x1, 0x1, '\x00', r4, r11, 0x5, 0x1, 0x3}, 0x50) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r10) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000c80)) socket$inet6_sctp(0xa, 0x5, 0x84) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r13, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r11, 0xc0805841, &(0x7f0000000e00)={0xffffffc0, 0x7f, 0x9, 0x0, 0x6829}) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000e80)={@remote, 0x56, r8}) 1.298898824s ago: executing program 0 (id=5033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005020a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000340)={{r0}, r3, 0x1a, @inherit={0x80, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x8, {0x21, 0x40, 0x8000000000000000, 0x1, 0x8001}, [0xfbb, 0x5, 0x8, 0x401, 0x4, 0x200, 0x6]}}, @devid}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"3fc7bf37badac087d0cf2a4d2ff4b5a7", r3, r4, {0x0, 0x1}, {0x21, 0x1}, 0x8000000000000000, [0x6, 0x1a746554, 0x2, 0x18, 0x5, 0x800, 0xb99, 0x7, 0xf24, 0xe, 0x80000001, 0x80000001, 0x2, 0x2e, 0x3, 0x7]}) 1.214747713s ago: executing program 3 (id=5034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x2d) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000003800)=""/4060, 0xfdc, 0x17, 0x0, 0x0) (async) recvfrom(r2, &(0x7f0000003800)=""/4060, 0xfdc, 0x17, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000a80)="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", 0x198}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f00000001c0)="de21cff472aa5855b7d5cdd1b4f1bb7aba2247d0cbcb642ba5f1472095873e04ed003b1d6f2db1ac20b80eaebb2200daba1e28e005", 0x35}, {&(0x7f00000014c0)="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", 0xccf}], 0x5) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000a80)="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", 0x198}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f00000001c0)="de21cff472aa5855b7d5cdd1b4f1bb7aba2247d0cbcb642ba5f1472095873e04ed003b1d6f2db1ac20b80eaebb2200daba1e28e005", 0x35}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896eb5e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c88b58461c373ee4a6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea7bddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed191a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e325c6713729be3e36752729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c134a499054c805aa5fe07f292aa493643bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db91c5eaa", 0xccf}], 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x100, 0x4e26, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x20}, {0x0, 0x9, 0x1000000000000006, 0xffff, 0xfffffffffffffffe, 0x2, 0xfffffffffffffff8, 0xffffffff}, {0x6, 0x0, 0x1f, 0x1ff}, {0x0, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x41}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4, 0x6, 0x10002, 0x8251c, 0x2, 0xd}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x41}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4, 0x6, 0x10002, 0x8251c, 0x2, 0xd}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000001c0)=""/32, 0x20, 0x0, &(0x7f00000002c0)=""/86, 0x56}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0xe06}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.211941113s ago: executing program 0 (id=5035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc8}}, 0x20050800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r3, 0x0, 0x20000000) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e23, @loopback}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737903000000000008000440000000000900010073797a300000"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000500)=0x6, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000003010102000000000000363f01"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r6) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="08002abd7000fedbdf25110000000600280003000000080031000400000008002b0008000000dd7f3858d39fd0058f9ea209581f8d2438de7da548bae0e11817b27d5b8146f80d88e9987a70ca1bfdb4b2cc8f3e12cc038c87225ee20fcc2f403308c630a7a52877f747775acc669eff2c5548346732d780c8cf07509b9f8345233aaecdf58c381995c0e93678e9e13e3913a768df4cd26250b8d23b3b15e0fcee49dce5a5301d3974b0ee2cc589d48a3111e080f0028b56c182c3d444f93a948f6a900abb5c3dd08d169e5ebc1969843d59319e2d534b21495e1f485d8167fc33962c00fdd1d3ef1a705da2fb"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100feffffff1500000001000000100007800c00018008000100", @ANYRES32=r13, @ANYBLOB="0c000200ffff0000000000000c0004000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000d9579736125545a1c1d1d70173c9103f397f3916596e5436dc3af4193723e09235680d7fbe1b0f979650d89bf589f8e4975803a44b60c551a667729a0e1fee11575914cb28933e8e72df72cab3eeac9f7e9f5072218a9062fec88bc8074fa205ecfdbc809de703c550f00437beee3c1933c2d8a174614da6d1c0366d9426a1c1874356f284b91c409ab9358d306422a47f4f98dfcab2fd96202be539b8cae15187802fa85433429b70f77785e6b368f929ba38de5c", @ANYRES16=r15, @ANYBLOB="000125bd7000ffdbdf25140000000c0007800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0xd0}, 0x8) sendmsg$NFT_MSG_GETCHAIN(r9, 0x0, 0x48000) 1.089031694s ago: executing program 4 (id=5036): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000058c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2509000000240004800c00078008000300d20500001300010062726f616463e7108c7649911e23a6"], 0x38}}, 0xc040) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000480)=r4}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000200), &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='@', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}], 0x1}, 0x400000}], 0x1, 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) r11 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) 1.081780665s ago: executing program 1 (id=5037): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x12, r3, 0xf61d0000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="10002d800a00000002020202020200000400000000002d800a"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x40000000000001a, 0x40000003, 0x0) shutdown(r0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r0, 0xfffffffffffffff9, 0x0, 0x7}) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001000000000000000000f900fe"], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000080)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x40050) 782.494985ms ago: executing program 1 (id=5038): syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 626.206631ms ago: executing program 1 (id=5039): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x20048840) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000001c0)={0x9}, 0x4) listen(r7, 0x5) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004e0001003400000002000a00806e"], 0x1c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x34}, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd27, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 392.602936ms ago: executing program 3 (id=5040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', r0, 0x8, 0x7800, 0x7, 0x5, {{0x3d, 0x4, 0x3, 0x8, 0xf4, 0x65, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x13, 0x45, [@local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x1f, 0xf1, [@multicast2, @multicast2, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @multicast1]}, @noop, @cipso={0x86, 0x1c, 0x1, [{0x0, 0xc, "0ea85e919d6bcabf3d31"}, {0x0, 0xa, "b97c90b31f71491d"}]}, @generic={0x83, 0x2}, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@private=0xa010100, 0x4}, {@multicast1, 0x7}, {@local, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}, @timestamp_prespec={0x44, 0x34, 0x58, 0x3, 0xd, [{@rand_addr=0x64010101, 0xffe00000}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x1}, {@multicast1, 0x40}, {@loopback, 0x401}]}, @ssrr={0x89, 0x27, 0x2a, [@rand_addr=0x64010100, @local, @loopback, @broadcast, @local, @private=0xa010102, @private=0xa010102, @broadcast, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @end]}}}}}) 348.585376ms ago: executing program 1 (id=5041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x40c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000ec0), 0x0, 0x20000000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20082cbd7000fedbdf25700000000c0099000010ce006f2a5ee9"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x4a) 343.87066ms ago: executing program 3 (id=5042): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x0, 0x0, 0x8000, 0x2000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xaa33}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25060000000800d181f32543d901007063690011000260020000000000003a31302e3000000000080003000100000006000400120000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000006000400010000000800010090ebbb2fcf02770b303030303a30303a31302e300000000008000084be1c00000600"], 0x9c}, 0x1, 0x0, 0x0, 0x5}, 0x400c001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x20, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x1b89e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xf}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000004500)=@newtaction={0x48, 0x76, 0x1, 0x5, 0x800000, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_police={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8003}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x405, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getsadinfo={0x24, 0x23, 0x4, 0x70bd26, 0x25dfdbfd, 0x0, [@extra_flags={0x8, 0x18, 0x3}, @replay_thresh={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4040014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r7, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0x100100}, 0x4008000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e61670000000000000000000000000000000004000000000000006c1900000004"], &(0x7f0000000080)=0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 180.397807ms ago: executing program 0 (id=5043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25100000000e0001006e657464657673696d0000000f6e6574646576739a2ce55de615837354fb696d30000008000b005a0b0000060011000000000008001300070000000577ea3aec9635ac4509cda92b95db7de99199273bad7ae1b4b6bc2c00870bc309ceb624eb708b56185d792b0d7af1f67ff315d56d7762df522d0c2adc025b8f4a0555ebc0bf34b8a0c5973574e4014b"], 0x54}}, 0x4000) 77.650821ms ago: executing program 4 (id=5044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfeff0000}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0x5d9ebdc8, 0x80a4, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xb, @value=r4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="1100000005000000"], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) close(0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x2, 0x4]}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r10, 0x0, &(0x7f0000000240)=""/145}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 44.301406ms ago: executing program 1 (id=5045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xf9}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xff72}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000002068d94696cc31a0500000000e3ff00050004000100000005000100070000001400078008000800000000050800134000000806050005000200000011000300686173683a6e65742c6e657400000000090002"], 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x45, [0xf3, 0x100089ff]}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040)) close(r6) close(0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYBLOB="e9deca1bb0f73ea69543667d732d025ad3637a8dd4067ecf989dcbae0c572517776c887ef5fbcd0322ba913ec9cbf4c316250aa71df874d54f34ff9b0a1a37d2d373d17a47166e31bbd9f509ba375bb7e5ea7742c1da4e33f4f1dbb96c727e3466496dbc7eee9ecb1abd5c405338153844fc83103eef6d81852b143908667a3a8b85e7cffdfec608bf06ad323be603", @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x4045) 0s ago: executing program 0 (id=5046): r0 = socket$inet6(0xa, 0x800, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x10, 0x1000, {0xc, @esp_ip4_spec={@multicast1, @rand_addr=0x64010100, 0x5, 0x1d}, {0x0, @random="4b5467da531c", 0x4700, 0x3ff, [0x9, 0x3]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0x2, 0x3, 0x1, 0x4}, {0x0, @remote, 0x8, 0x8, [0x7ff, 0x5]}, 0x1, 0x4ba}, 0x2, [0x2, 0x80000001]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='netdevsim0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="f654", 0x2}], 0x1}}], 0x2, 0x4404c880) sendto$inet6(r0, &(0x7f0000000740)="0c47fe3a55d5ab22b623553ea7b1892132d5b665564eff6e035eb69900b45741bdc282040b3b4a6c56badec4ebca4483840dd53dc54fafbbe71262e6296ec3fd7e8b4c00807fffffffffffd1d103376c03d5", 0x46, 0x3b40, 0x0, 0xfffffffffffffda1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000400)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x58, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xffffffffffffff68, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44040}, 0x20040844) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0x21, 0x0, &(0x7f0000001440)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x0, 0x4, {0xa, 0x4e24, 0x6, @remote}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000700)="30cb928120e9") r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x94b, &(0x7f0000000240)='geneve0\x00', 0x7, 0x7, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): [ 445.155392][T19746] netlink: 91 bytes leftover after parsing attributes in process `syz.3.3444'. [ 445.342802][T19754] netlink: 'syz.3.3447': attribute type 178 has an invalid length. [ 445.353170][ T8379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.463715][T19754] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20001 [ 445.550085][ T8381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.558666][ T8379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.576791][ T8381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.715302][ T8381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.738107][T19761] netlink: NAT attribute has 8 unknown bytes [ 445.744397][ T8381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.752288][T19761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.771666][T19761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3449'. [ 445.780783][T19761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3449'. [ 445.803645][T19761] ip_tables: iptables: counters copy to user failed while replacing table [ 445.814723][T19761] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 445.947482][T19761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.969562][T19778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.995927][T19770] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 446.025382][T19770] bond1: (slave batadv1): making interface the new active one [ 446.035290][T19770] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 446.061784][T19767] bond1: (slave veth5): Enslaving as an active interface with a down link [ 446.253238][T19792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.449942][T19800] syzkaller0: entered promiscuous mode [ 446.456013][T19800] syzkaller0: entered allmulticast mode [ 446.859116][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3464'. [ 446.884499][T19824] batadv_slave_1: entered promiscuous mode [ 446.894195][T19824] batadv_slave_1: left promiscuous mode [ 447.080943][T19833] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3468'. [ 447.104035][T19833] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3468'. [ 447.143331][T19830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.236432][T19837] netlink: 'syz.4.3469': attribute type 1 has an invalid length. [ 447.245261][T19837] netlink: 'syz.4.3469': attribute type 1 has an invalid length. [ 447.400273][T19846] ip_tables: iptables: counters copy to user failed while replacing table [ 447.780686][T19865] syzkaller0: left promiscuous mode [ 447.796815][T19865] syzkaller0: left allmulticast mode [ 447.926828][T19870] syzkaller0: tun_chr_ioctl cmd 35108 [ 448.319744][T19891] batadv_slave_1: entered promiscuous mode [ 448.349353][T19891] __nla_validate_parse: 73 callbacks suppressed [ 448.349371][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 448.416632][T19888] batadv_slave_1: left promiscuous mode [ 448.438968][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 448.487701][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 448.506988][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.529430][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.587119][ T8381] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.637314][ T8381] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.857684][T19917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 448.910613][T19917] bond0: entered promiscuous mode [ 448.946200][T19917] bond_slave_0: entered promiscuous mode [ 448.972380][T19917] bond_slave_1: entered promiscuous mode [ 448.996765][T19917] bond0: left promiscuous mode [ 449.019242][T19917] bond_slave_0: left promiscuous mode [ 449.026106][T19917] bond_slave_1: left promiscuous mode [ 449.078198][T19924] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3489'. [ 449.440782][T19949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3493'. [ 449.497877][T19948] netlink: 'syz.1.3493': attribute type 1 has an invalid length. [ 449.520801][T19948] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 450.037388][T19972] tipc: Enabled bearer , priority 0 [ 450.093687][T19977] syzkaller0: entered promiscuous mode [ 450.101313][T19975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3498'. [ 450.110639][T19977] syzkaller0: entered allmulticast mode [ 450.125139][T19972] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 450.462012][T19977] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3497'. [ 450.578698][T19983] tipc: Resetting bearer [ 450.631770][T19971] tipc: Resetting bearer [ 450.679474][T20002] netlink: 'syz.1.3503': attribute type 13 has an invalid length. [ 450.701777][T20002] netlink: 'syz.1.3503': attribute type 17 has an invalid length. [ 450.716662][T19971] tipc: Disabling bearer [ 450.790006][T20007] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 450.832905][T20002] gretap0: refused to change device tx_queue_len [ 450.858007][T20002] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 451.043445][T20018] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3508'. [ 451.065579][T20018] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 451.100677][T20018] 0ªî{X¹¦: entered allmulticast mode [ 451.143192][T20018] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 451.170038][ T8381] IPVS: starting estimator thread 0... [ 451.184472][T20028] netlink: 'syz.0.3511': attribute type 29 has an invalid length. [ 451.264012][T20026] IPVS: using max 27 ests per chain, 64800 per kthread [ 451.277718][T20019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.291927][T20019] bridge0: port 3(bond3) entered blocking state [ 451.311721][T20019] bridge0: port 3(bond3) entered disabled state [ 451.326968][T20019] bond3: entered allmulticast mode [ 451.354254][T20019] bond3: entered promiscuous mode [ 451.378356][T20019] bridge0: port 3(bond3) entered blocking state [ 451.384952][T20019] bridge0: port 3(bond3) entered forwarding state [ 451.407524][T20035] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 451.416470][T20036] batadv_slave_1: entered promiscuous mode [ 451.469144][T20028] batadv_slave_1: left promiscuous mode [ 451.564598][T20048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3515'. [ 451.640394][T20052] pimreg1: renamed from bridge0 (while UP) [ 451.673262][T20052] pimreg1: entered allmulticast mode [ 451.679118][T20052] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 451.823516][ T48] bridge0: port 3(bond3) entered disabled state [ 451.920757][T20064] syzkaller0: entered promiscuous mode [ 451.937639][T20064] syzkaller0: entered allmulticast mode [ 452.205316][T20070] netlink: zone id is out of range [ 452.257648][T20070] netlink: zone id is out of range [ 452.295303][T20070] netlink: zone id is out of range [ 452.326339][T20070] netlink: zone id is out of range [ 452.359519][T20070] netlink: zone id is out of range [ 452.384808][T20070] netlink: zone id is out of range [ 452.424225][T20070] netlink: zone id is out of range [ 452.939619][T20105] bond2 (unregistering): Released all slaves [ 452.999484][T20118] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 453.039832][T20120] hsr0: entered promiscuous mode [ 453.226627][T20108] hsr_slave_0: left promiscuous mode [ 453.259265][T20108] hsr_slave_1: left promiscuous mode [ 453.287520][T20108] hsr0 (unregistering): left promiscuous mode [ 453.494946][T20146] __nla_validate_parse: 7 callbacks suppressed [ 453.494964][T20146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3538'. [ 453.723846][T20155] smc: net device wg2 erased user defined pnetid SYZ0 [ 453.843981][T20155] smc: net device lo erased user defined pnetid SYZ0 [ 454.060609][T18779] udevd[18779]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 454.074527][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.089841][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.103709][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.113375][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.125249][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.135164][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.145274][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.156371][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 454.187427][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 455.638149][T20250] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 455.865036][T20244] net_ratelimit: 214 callbacks suppressed [ 455.865057][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.911546][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.930107][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.969164][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.021047][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.080472][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.121733][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.164296][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.183140][T20236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.241726][T20236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.335962][T20290] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 457.843341][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 458.170629][T20325] netlink: 'syz.4.3580': attribute type 2 has an invalid length. [ 458.207972][T20325] netlink: 'syz.4.3580': attribute type 1 has an invalid length. [ 458.263871][T20332] bridge0: port 3(veth1_to_bridge) entered blocking state [ 458.332388][T20332] bridge0: port 3(veth1_to_bridge) entered disabled state [ 458.394478][T20332] veth1_to_bridge: entered allmulticast mode [ 458.475498][T20332] veth1_to_bridge: entered promiscuous mode [ 458.912528][T20363] __nla_validate_parse: 74 callbacks suppressed [ 458.912547][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 458.951397][T20363] block nbd3: Unsupported socket: should be TCP or UNIX. [ 459.067859][T20360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.218688][T20370] Bluetooth: MGMT ver 1.23 [ 459.493397][T20377] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.501171][T20377] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.864844][T20378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.890652][T20378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.926348][T20378] tipc: Resetting bearer [ 459.937237][T20378] tipc: Resetting bearer [ 460.036816][T20381] vcan1: entered allmulticast mode [ 460.095957][T20390] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 460.177099][T20400] sctp: [Deprecated]: syz.2.3596 (pid 20400) Use of int in max_burst socket option deprecated. [ 460.177099][T20400] Use struct sctp_assoc_value instead [ 460.192271][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.229865][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.536592][T20427] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.548649][T20427] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.929642][T20447] syzkaller1: entered promiscuous mode [ 460.945804][T20447] syzkaller1: entered allmulticast mode [ 460.987466][T20452] netlink: 'syz.0.3607': attribute type 2 has an invalid length. [ 461.195599][T20452] : entered promiscuous mode [ 461.230784][T20461] net_ratelimit: 353 callbacks suppressed [ 461.230803][T20461] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 461.448991][T20473] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3613'. [ 461.450875][T20472] netlink: 'syz.3.3611': attribute type 5 has an invalid length. [ 461.665097][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.696875][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.741335][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.777951][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.806670][T20492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3619'. [ 461.819305][T20492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3619'. [ 461.832827][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.846121][T20495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3618'. [ 461.869981][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.893747][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.909349][T20490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3618'. [ 461.935942][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.962048][T20482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.197113][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 462.510144][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3626'. [ 462.640446][T20423] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 462.926526][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 462.956358][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 463.202225][T20547] Cannot find del_set index 3 as target [ 463.250435][ T5615] block nbd3: Receive control failed (result -107) [ 463.707971][T20552] netlink: 'syz.2.3629': attribute type 1 has an invalid length. [ 463.869233][ T5272] veth1_vlan: left promiscuous mode [ 464.060767][T20570] __nla_validate_parse: 2 callbacks suppressed [ 464.060787][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3634'. [ 464.653716][T20582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'. [ 464.704888][T20593] netlink: 'syz.4.3639': attribute type 2 has an invalid length. [ 464.769956][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 464.832952][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3639'. [ 464.868609][T20596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3639'. [ 464.888541][T20601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3640'. [ 464.998270][T20593] bond1: entered promiscuous mode [ 465.124468][T20423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.175982][T20423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.215946][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3642'. [ 465.442646][T20625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3645'. [ 465.455283][T20628] netlink: 'syz.4.3646': attribute type 1 has an invalid length. [ 465.562636][T20628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.688140][T20635] bond2: (slave gretap1): making interface the new active one [ 465.716818][T20635] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 466.119846][ T29] audit: type=1804 audit(1787695121.809:16): pid=20658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3653" name="/newroot/41/cgroup.controllers" dev="tmpfs" ino=225 res=1 errno=0 [ 466.207624][ T29] audit: type=1800 audit(1787695121.809:17): pid=20658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3653" name="cgroup.controllers" dev="tmpfs" ino=225 res=0 errno=0 [ 466.429009][T20681] ip6gre1: entered allmulticast mode [ 466.756884][T20708] netlink: 'syz.1.3663': attribute type 1 has an invalid length. [ 466.935875][T20709] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 466.989690][T20708] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 468.348360][T20777] net_ratelimit: 5 callbacks suppressed [ 468.349102][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.367940][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.378810][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.387593][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.396385][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.412712][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.421762][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.434134][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.449505][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.458663][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.094699][T20667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.320878][T20792] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 469.337339][T20790] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3679'. [ 469.369156][T20790] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3679'. [ 469.814645][T20815] dvmrp0: entered allmulticast mode [ 469.965936][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 469.975216][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 469.983647][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 469.992040][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.000398][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.008782][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.017142][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.025504][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.033873][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.042235][T20823] tc action pedit unable to extract header offset for header type (0x5) [ 470.300072][T20836] IPVS: set_ctl: invalid protocol: 26028 172.20.20.23:20002 [ 470.596017][T20858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.614331][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 470.879237][T20871] netlink: 'syz.3.3700': attribute type 10 has an invalid length. [ 470.908359][T20871] team0 (unregistering): Port device team_slave_0 removed [ 470.930900][T20871] team0 (unregistering): Port device team_slave_1 removed [ 470.968048][T20876] syzkaller0: entered promiscuous mode [ 470.973717][T20876] syzkaller0: entered allmulticast mode [ 470.987065][T20876] tipc: Enabled bearer , priority 0 [ 470.995926][T20875] tipc: Resetting bearer [ 471.016127][T20875] tipc: Disabling bearer [ 471.234448][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 471.346071][T20891] netlink: 'syz.1.3707': attribute type 34 has an invalid length. [ 471.390781][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 471.682109][ T5615] Bluetooth: hci3: command tx timeout [ 471.887705][T20920] netlink: 'syz.2.3712': attribute type 2 has an invalid length. [ 471.996215][T20920] : entered promiscuous mode [ 472.180601][T20941] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3719'. [ 472.364901][T20425] IPVS: starting estimator thread 0... [ 472.369715][T20955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3723'. [ 472.462100][T20956] IPVS: using max 28 ests per chain, 67200 per kthread [ 472.734530][T20974] netlink: 'syz.2.3728': attribute type 1 has an invalid length. [ 472.750524][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 472.955982][T20984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3732'. [ 473.173702][T20994] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 473.288162][T21003] tipc: Enabling of bearer rejected, failed to enable media [ 473.323512][T21006] netlink: 'syz.0.3739': attribute type 3 has an invalid length. [ 473.686004][T21023] dvmrp1: entered allmulticast mode [ 474.361768][T21056] block nbd4: server does not support multiple connections per device. [ 474.423548][T21056] block nbd4: shutting down sockets [ 474.674649][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 474.713068][T21074] xt_TCPMSS: Only works on TCP SYN packets [ 474.811678][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 474.969858][T21074] veth1_to_bridge: left allmulticast mode [ 474.999271][T21087] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 475.021569][T21074] veth1_to_bridge: left promiscuous mode [ 475.072072][T21074] bridge0: port 3(veth1_to_bridge) entered disabled state [ 475.094958][T21074] bridge_slave_1: left allmulticast mode [ 475.121884][T21074] bridge_slave_1: left promiscuous mode [ 475.141892][T21074] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.180231][T21074] bridge_slave_0: left allmulticast mode [ 475.196536][T21074] bridge_slave_0: left promiscuous mode [ 475.206250][T21074] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.644620][T21114] IPVS: set_ctl: invalid protocol: 15 0.0.0.0:20014 [ 475.689499][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3769'. [ 475.709636][T21118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3768'. [ 475.729016][T21118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3768'. [ 475.992560][T21136] xt_hashlimit: Unknown mode mask 2001C, kernel too old? [ 476.193670][T21151] syz_tun: entered allmulticast mode [ 476.225951][T21151] syzkaller1: entered promiscuous mode [ 476.232571][T21151] syzkaller1: entered allmulticast mode [ 476.250981][T21148] syz_tun: left allmulticast mode [ 476.410284][T21158] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 476.473214][T21160] netlink: 'syz.3.3782': attribute type 14 has an invalid length. [ 476.494110][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'. [ 477.245532][T21196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3794'. [ 477.304036][T21191] syzkaller0: entered promiscuous mode [ 477.331736][T21191] syzkaller0: entered allmulticast mode [ 477.747380][T21211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.768053][T21211] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.810921][T21211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.972566][T20423] net_ratelimit: 5 callbacks suppressed [ 477.972585][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.989439][T20425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.998271][T20425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.007396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.033845][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.049655][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.062741][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.071666][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.081928][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.101901][T20415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.170717][T21211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.183216][T21211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.205765][T21211] veth1_macvtap: left promiscuous mode [ 478.212686][T21211] veth0_macvtap: left promiscuous mode [ 478.219091][T21211] veth0_macvtap: entered promiscuous mode [ 478.226413][T21211] veth1_macvtap: entered promiscuous mode [ 478.245379][T21211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.254761][T21211] 8021q: adding VLAN 0 to HW filter on device eth0 [ 478.264144][T21211] 8021q: adding VLAN 0 to HW filter on device eth1 [ 478.276456][T21211] 8021q: adding VLAN 0 to HW filter on device eth2 [ 478.285781][T21211] 8021q: adding VLAN 0 to HW filter on device eth3 [ 478.295348][T21211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.305374][T21211] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 478.319312][T21211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.332590][T20420] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.417426][T21228] syz_tun: entered allmulticast mode [ 478.531477][T20420] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.679036][T21226] syz_tun: left allmulticast mode [ 478.736131][T20424] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.953867][T20424] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.019107][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3805'. [ 479.033274][T21252] netlink: 'syz.1.3801': attribute type 4 has an invalid length. [ 479.057647][T21252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3801'. [ 479.487317][T21275] netlink: 'syz.2.3809': attribute type 13 has an invalid length. [ 479.543761][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 479.727704][T21289] x_tables: duplicate underflow at hook 3 [ 480.085049][T21303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3816'. [ 480.428666][T21324] syzkaller0: entered promiscuous mode [ 480.472204][T21324] syzkaller0: entered allmulticast mode [ 481.022167][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 481.048456][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 481.180468][T21327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.564395][T21379] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 481.764381][T21379] bond2: entered promiscuous mode [ 481.786797][T21379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.879823][T21372] vlan2: entered allmulticast mode [ 481.905626][T21372] bond2: entered allmulticast mode [ 481.972329][T21383] bond2: (slave bridge0): making interface the new active one [ 481.988510][T21383] bridge0: entered promiscuous mode [ 481.994767][T21383] bridge0: entered allmulticast mode [ 482.012023][T21383] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 482.124762][T21399] team_slave_0: entered allmulticast mode [ 482.147783][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'. [ 482.358429][T21386] syzkaller0: entered promiscuous mode [ 482.365092][T21386] syzkaller0: entered allmulticast mode [ 482.379671][T21399] team0: Port device team_slave_0 removed [ 482.394482][T21399] team_slave_0 (unregistering): left allmulticast mode [ 482.442300][T21408] block nbd4: server does not support multiple connections per device. [ 482.453584][T21408] block nbd4: shutting down sockets [ 482.799110][T21429] sctp: [Deprecated]: syz.2.3840 (pid 21429) Use of int in max_burst socket option deprecated. [ 482.799110][T21429] Use struct sctp_assoc_value instead [ 482.952781][T20426] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 483.292417][ T5831] net_ratelimit: 58 callbacks suppressed [ 483.292438][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.444581][T20424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.453235][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.462203][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.471379][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.480308][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.489501][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.502053][T13296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.519184][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.531912][T13301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.620764][T21417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.750684][T21460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3850'. [ 486.062962][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3856'. [ 486.098393][T21481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.116695][T21481] bond4: option ad_select: unable to set because the bond device is up [ 486.129989][T21481] netlink: 'syz.2.3856': attribute type 4 has an invalid length. [ 486.138592][T20426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.141335][T21481] netlink: 'syz.2.3856': attribute type 8 has an invalid length. [ 486.155284][T21481] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3856'. [ 486.197149][T20426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.399204][T21492] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3859'. [ 486.426529][T21492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3859'. [ 487.575246][T21548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3874'. [ 487.842547][T21556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3877'. [ 488.139390][T21567] netlink: 'syz.0.3879': attribute type 10 has an invalid length. [ 488.178981][T21567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3879'. [ 488.196283][T21567] dummy0: entered promiscuous mode [ 488.476868][T21568] bond4 (unregistering): Released all slaves [ 488.612523][T20418] net_ratelimit: 35 callbacks suppressed [ 488.612543][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 488.723152][T13296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.789918][T21598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3886'. [ 488.799089][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 488.810275][T20415] wlan1: Trigger new scan to find an IBSS to join [ 488.941276][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 488.996485][T21605] netlink: 460 bytes leftover after parsing attributes in process `syz.3.3887'. [ 489.067925][T21605] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 489.082414][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 489.203364][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 489.249351][T21607] pimreg: entered allmulticast mode [ 489.320899][T21625] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.330844][T21625] team0: Port device bond5 added [ 489.393244][T21625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.403898][T21625] team0: Port device bond6 added [ 489.489570][T21625] 8021q: adding VLAN 0 to HW filter on device bond7 [ 489.499654][T21625] team0: Port device bond7 added [ 489.505007][T21606] pimreg: left allmulticast mode [ 489.603026][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.647590][T21625] 8021q: adding VLAN 0 to HW filter on device bond8 [ 489.677746][T21625] team0: Port device bond8 added [ 489.749285][T21625] 8021q: adding VLAN 0 to HW filter on device bond9 [ 489.766998][T13296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.816640][T21625] team0: Port device bond9 added [ 489.853723][T21658] netlink: 'syz.3.3897': attribute type 1 has an invalid length. [ 490.008943][T21625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.018219][T21625] team0: Port device bond10 added [ 490.034429][T21657] bridge0: port 3(vlan2) entered blocking state [ 490.041063][T21657] bridge0: port 3(vlan2) entered disabled state [ 490.047782][T21657] vlan2: entered allmulticast mode [ 490.055237][T21657] dummy0: entered allmulticast mode [ 490.064870][T21657] vlan2: entered promiscuous mode [ 490.069965][T21657] dummy0: entered promiscuous mode [ 490.090381][T21663] batadv_slave_0: entered allmulticast mode [ 490.123976][T21663] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 490.188190][T21625] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 490.190190][T21665] netlink: 'syz.1.3899': attribute type 4 has an invalid length. [ 490.351444][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 490.459237][T21685] netlink: 'syz.1.3904': attribute type 10 has an invalid length. [ 490.514002][T21684] netlink: 'syz.4.3905': attribute type 21 has an invalid length. [ 490.533338][T21684] netlink: 'syz.4.3905': attribute type 22 has an invalid length. [ 490.549817][T21684] netlink: 'syz.4.3905': attribute type 23 has an invalid length. [ 490.566177][T21685] team0: Device wg2 is of different type [ 490.574447][T21684] netlink: 'syz.4.3905': attribute type 25 has an invalid length. [ 491.123392][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 491.727400][T20425] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe2 [ 491.773217][T20418] wlan1: Trigger new scan to find an IBSS to join [ 492.414559][T21716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.421889][T20424] IPVS: starting estimator thread 0... [ 493.523732][T21780] IPVS: using max 30 ests per chain, 72000 per kthread [ 493.632741][T20414] IPVS: starting estimator thread 0... [ 493.640410][T21786] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 493.673935][T21786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.700812][T21786] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.730818][T21786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.738081][T21787] IPVS: using max 27 ests per chain, 64800 per kthread [ 493.921394][T13296] net_ratelimit: 39 callbacks suppressed [ 493.921413][T13296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.362502][T21786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.373960][T21786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.386765][T21786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.400156][T21786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.412478][T21786] tipc: Resetting bearer [ 494.424745][T21786] tipc: Resetting bearer [ 494.450153][T21786] veth1_vlan: left promiscuous mode [ 494.456996][T21786] veth0_vlan: left promiscuous mode [ 494.465145][T21786] veth0_vlan: entered promiscuous mode [ 494.474112][T21786] veth1_vlan: entered promiscuous mode [ 494.484973][T21786] tipc: Resetting bearer [ 494.490926][T21786] veth1_macvtap: left promiscuous mode [ 494.498532][T21786] veth0_macvtap: left promiscuous mode [ 494.510583][T21786] veth0_macvtap: entered promiscuous mode [ 494.518577][T21786] veth1_macvtap: entered promiscuous mode [ 494.544243][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.569390][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.587913][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.605574][T21786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.618257][T21786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.636145][T21786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.663822][T20414] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.671061][T20414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.688059][T20414] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.695436][T20414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.805430][T20425] wlan1: Trigger new scan to find an IBSS to join [ 494.817341][T21806] erspan0: entered promiscuous mode [ 494.865693][T20415] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.890974][T20415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.907749][T21805] erspan0: left promiscuous mode [ 494.973199][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.119550][T21825] __nla_validate_parse: 4 callbacks suppressed [ 495.119570][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3933'. [ 495.299018][T21834] netlink: ct family unspecified [ 495.304340][T21834] openvswitch: netlink: Actions may not be safe on all matching packets [ 495.318440][T21833] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 495.331945][T20420] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.347929][T20420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.391558][T20418] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.410655][T20418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.458551][T20418] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.492210][T20418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.509110][T21842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3939'. [ 495.709471][T20426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.713498][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 495.738145][T21849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3940'. [ 495.749367][T21849] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3940'. [ 495.850732][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 495.883508][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 495.903722][T21856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 495.953900][T21856] netlink: 'syz.0.3943': attribute type 12 has an invalid length. [ 495.996086][T21856] netlink: 'syz.0.3943': attribute type 11 has an invalid length. [ 496.005844][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 496.008176][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 496.013903][T13296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.152028][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 496.351866][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 496.611462][T21888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3950'. [ 496.677371][T21889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3950'. [ 496.870671][T21896] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 496.970445][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3952'. [ 497.301185][ T29] audit: type=1804 audit(1787695152.989:18): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3955" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=695 res=1 errno=0 [ 497.354676][ T29] audit: type=1800 audit(1787695152.989:19): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3955" name="cgroup.controllers" dev="tmpfs" ino=695 res=0 errno=0 [ 497.527110][T21925] bond2: entered promiscuous mode [ 497.557634][T21925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.641453][T21931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.648764][T21931] IPv6: NLM_F_CREATE should be set when creating new route [ 497.656090][T21931] IPv6: NLM_F_CREATE should be set when creating new route [ 497.920646][T21936] nbd: couldn't find a device at index 0 [ 499.023148][T20424] net_ratelimit: 40 callbacks suppressed [ 499.023169][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 499.122524][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.251428][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 499.382047][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 499.505001][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 499.622427][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 499.681465][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.689803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.741994][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 499.760465][T22032] netlink: 'syz.3.3986': attribute type 13 has an invalid length. [ 499.871218][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 500.301058][T22064] team0: Port device wlan0 added [ 500.352556][T22066] __nla_validate_parse: 3 callbacks suppressed [ 500.352574][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 500.413842][T22066] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 500.427463][T22066] bond5 (unregistering): Released all slaves [ 500.495876][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 500.540556][T22081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4000'. [ 500.580586][T22081] netlink: 'syz.4.4000': attribute type 12 has an invalid length. [ 500.601453][T22081] netlink: 'syz.4.4000': attribute type 11 has an invalid length. [ 500.663495][T22085] syzkaller0: entered promiscuous mode [ 500.686659][T22085] syzkaller0: entered allmulticast mode [ 500.862338][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4002'. [ 500.990520][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 501.079374][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 501.128519][T22105] netlink: 'syz.4.4005': attribute type 15 has an invalid length. [ 501.361477][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 501.405383][T22122] netlink: 'syz.2.4012': attribute type 46 has an invalid length. [ 501.443270][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4011'. [ 501.529875][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'. [ 501.596046][T22116] netlink: 'syz.1.4008': attribute type 11 has an invalid length. [ 501.650355][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'. [ 501.674086][T22121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 501.700912][T22116] netlink: 'syz.1.4008': attribute type 11 has an invalid length. [ 501.731026][T22121] netlink: 'syz.1.4008': attribute type 11 has an invalid length. [ 502.329244][T22172] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 503.557060][T22238] tipc: Enabling of bearer rejected, failed to enable media [ 504.142868][T20414] net_ratelimit: 102 callbacks suppressed [ 504.142890][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 504.322774][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.352597][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 504.493736][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 504.635923][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 504.791351][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 504.817243][T22301] bridge0: port 4(wlan1) entered blocking state [ 504.829967][T22301] bridge0: port 4(wlan1) entered disabled state [ 504.847462][T22301] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 504.903072][T22301] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 505.006723][T22296] bridge0: port 4(wlan1) entered disabled state [ 505.070153][T22296] mac80211_hwsim hwsim42 wlan1 (unregistering): left allmulticast mode [ 505.099540][T22296] mac80211_hwsim hwsim42 wlan1 (unregistering): left promiscuous mode [ 505.127370][T22296] bridge0: port 4(wlan1) entered disabled state [ 505.184480][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 505.362676][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.510442][T22329] netlink: 'syz.4.4059': attribute type 1 has an invalid length. [ 505.636047][T22329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.762590][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.771150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.996141][T22346] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 506.013321][T22346] __nla_validate_parse: 14 callbacks suppressed [ 506.013341][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 506.037786][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 506.059704][T22351] netlink: 'syz.0.4063': attribute type 21 has an invalid length. [ 506.671841][T22383] netlink: 'syz.3.4072': attribute type 4 has an invalid length. [ 506.939486][T22396] veth0_to_hsr: entered promiscuous mode [ 506.955832][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4075'. [ 506.968980][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4075'. [ 507.279444][T22412] xt_l2tp: v2 doesn't support IP mode [ 507.789279][T22435] syzkaller0: entered promiscuous mode [ 507.838973][T22435] syzkaller0: entered allmulticast mode [ 507.989689][T22450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4088'. [ 508.089441][T22456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4088'. [ 508.129466][T22459] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4089'. [ 508.656385][T22478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4091'. [ 509.397820][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4094'. [ 509.533236][ T5831] net_ratelimit: 23 callbacks suppressed [ 509.533257][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.696086][T13301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.704514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.503286][T22501] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 510.570799][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.451245][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 511.601724][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.613277][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 511.731512][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 511.739881][T22507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4099'. [ 511.808850][T22516] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4099'. [ 511.841449][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.865811][T22514] gre0: entered promiscuous mode [ 511.884970][T22514] gre0: entered allmulticast mode [ 511.896996][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 511.946926][T22507] bond4 (unregistering): Released all slaves [ 512.206837][T22531] geneve2: entered promiscuous mode [ 512.263624][T20418] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 36539 - 0 [ 512.292732][T20418] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 36539 - 0 [ 512.328563][T20418] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 36539 - 0 [ 512.375524][T20418] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 36539 - 0 [ 512.775674][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4114'. [ 512.828139][T22575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4114'. [ 513.016531][T22582] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4116'. [ 513.330019][T22595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4118'. [ 513.944340][T22624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4123'. [ 514.602351][T20426] net_ratelimit: 24 callbacks suppressed [ 514.602374][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 514.722032][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 514.726123][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.831303][T20423] bond2: (slave bridge2): failed to get link speed/duplex [ 514.881839][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.890164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.942106][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 515.051277][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 515.135078][T22645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4125'. [ 515.162023][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 515.354477][T22665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.368847][T22665] bond3: (slave bond4): Enslaving as an active interface with an up link [ 515.417487][T22645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4125'. [ 515.464736][T22671] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 515.496502][T22645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.551526][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 516.537120][T22712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.079054][T22731] pim6reg: entered allmulticast mode [ 517.322454][T22742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4149'. [ 518.710994][T22768] veth2: entered promiscuous mode [ 518.971823][T22779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4160'. [ 518.985968][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4159'. [ 519.177816][T22784] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4161'. [ 519.586875][T22798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4165'. [ 519.633680][T20415] net_ratelimit: 34 callbacks suppressed [ 519.633702][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 519.791913][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 519.899518][T22813] syzkaller0: entered promiscuous mode [ 519.912954][T22813] syzkaller0: entered allmulticast mode [ 519.922880][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.952265][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 520.101374][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 520.160076][T22819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4169'. [ 520.231825][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 520.352512][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 520.366808][T22827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.382627][T22827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.391045][T22827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.759911][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 520.882883][T22836] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4175'. [ 520.936154][T22834] syzkaller0: entered promiscuous mode [ 520.956549][T22834] syzkaller0: entered allmulticast mode [ 521.166861][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4177'. [ 521.179189][T22855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 521.229120][T22854] netlink: 'syz.0.4178': attribute type 12 has an invalid length. [ 521.694364][T22871] netlink: 'syz.2.4184': attribute type 5 has an invalid length. [ 521.841386][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 524.458211][T22863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.474531][T22883] syzkaller0: entered promiscuous mode [ 524.483947][T22883] syzkaller0: entered allmulticast mode [ 524.696920][T22910] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 524.752333][T20424] net_ratelimit: 684 callbacks suppressed [ 524.752352][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 524.832210][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.849333][T22922] __nla_validate_parse: 1 callbacks suppressed [ 524.849352][T22922] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4188'. [ 524.902110][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 524.973047][T22929] x_tables: duplicate underflow at hook 3 [ 525.014398][T22929] x_tables: duplicate underflow at hook 3 [ 525.057615][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 525.072122][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 525.124752][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.202419][T20423] bond2: (slave bridge2): failed to get link speed/duplex [ 525.343089][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 525.383466][T22956] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 525.393376][T22958] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4197'. [ 525.420848][T22956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4198'. [ 525.476254][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4200'. [ 525.511366][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 525.532992][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4197'. [ 525.611808][T22958] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4197'. [ 525.646094][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 525.713671][T22967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.736291][T22979] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4203'. [ 525.793628][T22967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.831276][T20423] bond2: (slave bridge2): failed to get link speed/duplex [ 525.951843][T20420] bond2: (slave bridge2): failed to get link speed/duplex [ 526.083320][T22995] bond5: entered promiscuous mode [ 526.088945][T22995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.459507][T23017] netlink: 'syz.0.4211': attribute type 4 has an invalid length. [ 526.530663][T23023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4216'. [ 526.867355][T23041] nft_compat: unsupported protocol 1 [ 527.170989][T23058] SET target dimension over the limit! [ 527.238937][T23062] syzkaller0: entered promiscuous mode [ 527.244938][T23062] syzkaller0: entered allmulticast mode [ 527.710142][T23060] syzkaller1: entered promiscuous mode [ 527.724677][T23060] syzkaller1: entered allmulticast mode [ 528.368613][T23097] x_tables: duplicate underflow at hook 2 [ 528.924724][T23099] syzkaller1: entered promiscuous mode [ 528.934253][T23099] syzkaller1: entered allmulticast mode [ 529.039448][T23113] netlink: 'syz.3.4246': attribute type 2 has an invalid length. [ 529.433906][T23122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.179300][T20418] net_ratelimit: 33 callbacks suppressed [ 530.179321][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.220432][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.230881][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.321425][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.375441][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.405783][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.641804][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 532.773024][T23174] __nla_validate_parse: 10 callbacks suppressed [ 532.773046][T23174] netlink: 616 bytes leftover after parsing attributes in process `syz.2.4261'. [ 532.831223][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 532.848498][T23178] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 533.030070][T23178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.051492][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 533.093350][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 533.146508][T23182] bond6: (slave veth9): Enslaving as an active interface with a down link [ 533.228960][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4262'. [ 533.266803][T23183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.279090][T23183] dummy0: left promiscuous mode [ 533.284858][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.346419][T23183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.356562][T23183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.375173][T23183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.386380][T23183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.402674][T23183] veth1_vlan: left promiscuous mode [ 533.409093][T23183] veth0_vlan: left promiscuous mode [ 533.416284][T23183] veth0_vlan: entered promiscuous mode [ 533.424386][T23183] veth1_vlan: entered promiscuous mode [ 533.434475][T23183] veth1_macvtap: left promiscuous mode [ 533.440983][T23183] veth0_macvtap: left promiscuous mode [ 533.448397][T23183] veth1_macvtap: entered promiscuous mode [ 533.464896][T23183] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 533.474877][T23183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.484191][T23183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.494369][T23183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.503143][T23183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.535869][T23183] bond2: left promiscuous mode [ 533.563964][T23178] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 533.575088][T23178] bond6: (slave batadv2): making interface the new active one [ 533.585871][T23178] batadv2: entered promiscuous mode [ 533.593338][T23178] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 533.699159][T23198] bond11: entered promiscuous mode [ 533.758840][T23198] bond11: entered allmulticast mode [ 533.779959][T23198] 8021q: adding VLAN 0 to HW filter on device bond11 [ 533.786936][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 533.786958][T23208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4270'. [ 533.834604][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 533.893546][T23215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4271'. [ 533.903584][T23215] netlink: 'syz.4.4271': attribute type 7 has an invalid length. [ 533.916215][T23215] netlink: 'syz.4.4271': attribute type 8 has an invalid length. [ 533.927260][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'. [ 533.987750][T23211] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 534.006277][T23211] bond4 (unregistering): Released all slaves [ 534.014323][T23221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4271'. [ 534.052390][T20418] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.063043][T20418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.274144][T20414] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 534.304460][T20414] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.328601][T20414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.421754][T20425] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 534.472204][T20414] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 534.502786][T20426] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 534.524245][T20426] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.536211][T20426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.681642][T20414] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 534.714315][T20414] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.735421][T23252] Cannot find add_set index 1 as target [ 534.748501][T20414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.848605][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'. [ 535.000245][T23264] netlink: 'syz.4.4285': attribute type 3 has an invalid length. [ 535.030012][T23264] netlink: 'syz.4.4285': attribute type 3 has an invalid length. [ 535.157484][T23274] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 535.265991][T20426] net_ratelimit: 10 callbacks suppressed [ 535.266012][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 535.434375][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 535.521410][T13296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.572444][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 535.619029][T23292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.629253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.638151][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.648197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.691646][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 535.821368][T20420] bond2: (slave bridge2): failed to get link speed/duplex [ 536.047691][T23309] tipc: Enabled bearer , priority 0 [ 536.186202][T23309] syzkaller0: entered promiscuous mode [ 536.193261][T23309] syzkaller0: entered allmulticast mode [ 536.199562][T23309] tipc: Resetting bearer [ 536.249392][T23323] netlink: 'syz.1.4304': attribute type 4 has an invalid length. [ 536.266302][T23309] tipc: Resetting bearer [ 536.608203][T23330] netlink: 'syz.0.4305': attribute type 7 has an invalid length. [ 536.616185][T23330] netlink: 'syz.0.4305': attribute type 8 has an invalid length. [ 538.680861][T23309] tipc: Disabling bearer [ 538.854274][T23337] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 538.868557][T23337] __nla_validate_parse: 5 callbacks suppressed [ 538.868572][T23337] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4309'. [ 539.194230][T23356] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4312'. [ 539.211281][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4312'. [ 539.234835][T23356] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4312'. [ 539.258847][T23356] netlink: 'syz.0.4312': attribute type 2 has an invalid length. [ 539.275083][T23362] netlink: 'syz.1.4310': attribute type 2 has an invalid length. [ 539.294100][T23356] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4312'. [ 539.340381][T23362] : entered promiscuous mode [ 539.625130][T23371] ipt_REJECT: ECHOREPLY no longer supported. [ 539.626673][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4318'. [ 539.883369][T23388] syzkaller0: entered promiscuous mode [ 539.896019][T23388] syzkaller0: entered allmulticast mode [ 539.954751][T23381] netlink: 'syz.1.4320': attribute type 11 has an invalid length. [ 539.980669][T23381] netlink: 'syz.1.4320': attribute type 4 has an invalid length. [ 540.015331][T23381] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4320'. [ 540.320379][T23403] net_ratelimit: 19 callbacks suppressed [ 540.320400][T23403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.451381][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 542.582579][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 542.629756][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 542.659822][T23425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4330'. [ 542.771840][T23438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4329'. [ 542.993808][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 543.142353][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 543.262560][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 543.399566][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 543.532450][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 543.616398][T23476] netlink: 'syz.4.4341': attribute type 4 has an invalid length. [ 543.630731][T23477] netlink: 'syz.3.4342': attribute type 11 has an invalid length. [ 543.672392][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 543.832500][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 543.876440][T23499] netlink: 'syz.4.4347': attribute type 4 has an invalid length. [ 543.936135][T23499] __nla_validate_parse: 2 callbacks suppressed [ 543.936154][T23499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4347'. [ 544.305242][T23523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4350'. [ 544.354957][T23524] netlink: 'syz.3.4349': attribute type 1 has an invalid length. [ 544.374554][T23524] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4349'. [ 544.401297][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 545.412612][T20425] net_ratelimit: 3 callbacks suppressed [ 545.412632][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 545.464012][T20426] batadv2: left promiscuous mode [ 545.607150][T23556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4358'. [ 545.779030][T23548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.820103][T23548] veth1_vlan: entered promiscuous mode [ 545.866811][T23548] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 545.954884][T20418] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.015669][T20424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.042081][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 546.175090][T23565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4360'. [ 546.192749][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 546.305192][T23569] xt_TCPMSS: Only works on TCP SYN packets [ 546.374761][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 546.522948][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 546.579042][T23578] nbd: must specify at least one socket [ 546.615110][T23583] netlink: 'syz.3.4367': attribute type 1 has an invalid length. [ 546.633919][T23583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4367'. [ 546.651325][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4367'. [ 546.772817][T23588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4368'. [ 546.793073][T23575] syzkaller0: entered promiscuous mode [ 546.795041][T23588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4368'. [ 546.823986][T23575] syzkaller0: entered allmulticast mode [ 546.836637][T23592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4368'. [ 546.845882][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 546.995683][T23598] nbd: must specify at least one socket [ 547.005953][ T5615] Bluetooth: hci3: link tx timeout [ 547.016007][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 547.036504][ T5625] Bluetooth: hci3: link tx timeout [ 547.049064][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 547.064662][T23602] netlink: 'syz.3.4367': attribute type 2 has an invalid length. [ 549.051790][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 549.570647][T23619] ip_tables: iptables: counters copy to user failed while replacing table [ 549.591624][T20423] bond2: (slave bridge2): failed to get link speed/duplex [ 549.681426][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.726527][T20423] bond2: (slave bridge2): failed to get link speed/duplex [ 549.851181][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 550.210634][T23666] __nla_validate_parse: 2 callbacks suppressed [ 550.210654][T23666] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4386'. [ 550.254727][T23664] veth2: entered promiscuous mode [ 550.402664][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.422001][T20425] net_ratelimit: 4 callbacks suppressed [ 550.422019][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 550.539216][T23678] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4390'. [ 550.542111][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 550.671789][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 550.699760][T23685] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 550.711775][T23685] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 550.861801][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 550.985357][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 551.111503][T20423] bond2: (slave bridge2): failed to get link speed/duplex [ 551.231441][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 551.273405][T23670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.482713][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 551.793187][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 551.818461][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 551.888171][T23724] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4402'. [ 551.945057][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 552.387623][T23748] netlink: 'syz.1.4408': attribute type 28 has an invalid length. [ 552.398686][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4408'. [ 553.299989][T23760] tipc: Enabled bearer , priority 0 [ 553.328798][T23767] x_tables: duplicate underflow at hook 1 [ 553.365828][T23767] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 553.529141][T23755] syzkaller0: entered promiscuous mode [ 553.549780][T23755] syzkaller0: entered allmulticast mode [ 553.575054][T23755] tipc: Resetting bearer [ 553.636941][T23754] tipc: Resetting bearer [ 555.805699][T23754] tipc: Disabling bearer [ 555.844093][T13301] tipc: Node number set to 3956208204 [ 555.942912][T20421] net_ratelimit: 2 callbacks suppressed [ 555.942933][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 556.026710][T23788] bridge0: port 1(syz_tun) entered blocking state [ 556.064632][T23788] bridge0: port 1(syz_tun) entered disabled state [ 556.116513][T23788] syz_tun: entered allmulticast mode [ 556.154411][T23788] syz_tun: entered promiscuous mode [ 556.160910][T23788] bridge0: port 1(syz_tun) entered blocking state [ 556.167551][T23788] bridge0: port 1(syz_tun) entered forwarding state [ 556.191447][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 556.233667][T23798] xt_hashlimit: size too large, truncated to 1048576 [ 556.307567][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 556.357136][T23801] netlink: 'syz.4.4421': attribute type 9 has an invalid length. [ 556.396546][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 556.407331][T23804] netlink: 'syz.3.4423': attribute type 39 has an invalid length. [ 556.483661][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 556.633583][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 556.835195][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 556.968388][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 557.029966][T23836] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4431'. [ 557.041261][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.091392][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 557.148674][T23839] sctp: [Deprecated]: syz.2.4432 (pid 23839) Use of int in max_burst socket option deprecated. [ 557.148674][T23839] Use struct sctp_assoc_value instead [ 557.221592][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 557.362684][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 557.387122][T23851] 0ªî{X¹¦: left allmulticast mode [ 557.445490][T23851] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4435'. [ 557.593752][T23867] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.4438'. [ 557.621540][T23867] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.4438'. [ 557.739098][T23870] SET target dimension over the limit! [ 557.852104][T23873] xt_hashlimit: size too large, truncated to 1048576 [ 557.870731][T23880] netlink: 'syz.4.4443': attribute type 1 has an invalid length. [ 557.959471][T23884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4444'. [ 557.969310][T23883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4444'. [ 557.989393][T23884] macvlan2: entered promiscuous mode [ 557.995092][T23884] syz_tun: entered promiscuous mode [ 558.005509][T23884] syz_tun: left promiscuous mode [ 558.054846][T23883] macvlan2: entered promiscuous mode [ 558.060360][T23883] syz_tun: entered promiscuous mode [ 558.069968][T23883] syz_tun: left promiscuous mode [ 558.389097][T23861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.657240][T23900] netlink: 'syz.2.4450': attribute type 3 has an invalid length. [ 558.864654][T23915] gre0: left promiscuous mode [ 558.887279][T23915] gre0: left allmulticast mode [ 558.937743][T23919] veth0: entered promiscuous mode [ 558.945697][T23919] vlan0: entered promiscuous mode [ 558.961336][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 558.986806][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 559.419899][T23940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 559.597245][T23947] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4462'. [ 559.804858][T23957] netlink: 'syz.3.4464': attribute type 1 has an invalid length. [ 559.850488][T23959] bond12: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 559.864513][T23959] bond12 (unregistering): Released all slaves [ 560.023871][T23965] veth0_to_bridge: entered promiscuous mode [ 560.034622][T23965] macvtap0: entered allmulticast mode [ 560.044622][T23965] veth0_to_bridge: entered allmulticast mode [ 560.060826][T23965] veth0_to_bridge: left allmulticast mode [ 560.077106][T23965] veth0_to_bridge: left promiscuous mode [ 560.344458][T23945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.564827][T23973] C: renamed from veth1_to_team (while UP) [ 560.620979][T23973] netlink: 'syz.3.4468': attribute type 4 has an invalid length. [ 560.992401][T20417] net_ratelimit: 33 callbacks suppressed [ 560.992424][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 561.141347][T20414] bond2: (slave bridge2): failed to get link speed/duplex [ 561.271865][T20421] bond2: (slave bridge2): failed to get link speed/duplex [ 561.401719][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 561.533286][T24008] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 561.533286][T24008] Please contact the netfilter-devel mailing list or update your nftables rules. [ 561.534649][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 561.617515][T24011] netlink: 'syz.1.4481': attribute type 9 has an invalid length. [ 561.651557][T24008] netlink: 'syz.2.4480': attribute type 2 has an invalid length. [ 561.674615][T24008] __nla_validate_parse: 6 callbacks suppressed [ 561.674633][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'. [ 561.754691][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 561.893692][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 562.052097][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 562.157090][T24037] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4486'. [ 562.182185][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 562.203270][T24037] veth1_to_team: entered allmulticast mode [ 562.322454][T20418] bond2: (slave bridge2): failed to get link speed/duplex [ 562.805507][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.895260][T24064] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4497'. [ 563.095120][T24066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4498'. [ 563.240050][T24081] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4502'. [ 563.420958][T24088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4504'. [ 563.470941][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4505'. [ 563.500845][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4505'. [ 563.699717][T24108] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma? [ 563.965758][T24116] vcan0: tx address claim with dest, not broadcast [ 564.157186][T24127] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4516'. [ 564.612941][T24146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4520'. [ 564.641760][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 566.978144][T24258] __nla_validate_parse: 4 callbacks suppressed [ 566.978166][T24258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4547'. [ 567.166996][T24261] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4548'. [ 567.303052][T24263] netlink: 'syz.3.4548': attribute type 2 has an invalid length. [ 567.311500][T24263] netlink: 'syz.3.4548': attribute type 2 has an invalid length. [ 568.989948][T24253] syzkaller1: entered promiscuous mode [ 568.995897][T24253] syzkaller1: entered allmulticast mode [ 569.112080][ T8380] net_ratelimit: 29 callbacks suppressed [ 569.112101][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 569.179936][T24265] TC_ACT_REPEAT abuse ? [ 569.331644][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 569.389408][T24275] sctp: [Deprecated]: syz.4.4551 (pid 24275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.389408][T24275] Use struct sctp_sack_info instead [ 569.452998][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 569.581430][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 569.701799][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 569.831919][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 569.917461][T24299] xt_l2tp: missing protocol rule (udp|l2tpip) [ 569.948912][T24296] netlink: 'syz.3.4559': attribute type 1 has an invalid length. [ 569.991280][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 570.022711][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4561'. [ 570.111519][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 570.184332][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 570.195088][T24309] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.4563'. [ 570.206671][T24308] openvswitch: netlink: Duplicate or invalid key (type 0). [ 570.356199][T24316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4565'. [ 570.752948][T24326] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 570.964222][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4568'. [ 570.982865][T24333] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 571.034160][T24333] ipt_ECN: cannot use operation on non-tcp rule [ 571.425852][T24358] netlink: 'syz.2.4572': attribute type 1 has an invalid length. [ 571.458931][T24329] bond0: option min_links: invalid value (18446744073709551615) [ 571.474235][T24329] bond0: option min_links: allowed values 0 - 2147483647 [ 571.488258][T24328] bond0: option min_links: invalid value (18446744073709551615) [ 571.533403][T24328] bond0: option min_links: allowed values 0 - 2147483647 [ 571.637385][T24358] 8021q: adding VLAN 0 to HW filter on device bond12 [ 572.065892][T24388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4581'. [ 572.095338][T24390] sctp: [Deprecated]: syz.1.4582 (pid 24390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.095338][T24390] Use struct sctp_sack_info instead [ 572.109885][T24388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'. [ 572.401757][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.759264][T24421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4589'. [ 572.911237][T24428] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 572.930413][T24414] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4590'. [ 573.073620][T24434] syzkaller0: entered promiscuous mode [ 573.096622][T24434] syzkaller0: entered allmulticast mode [ 573.386836][T24444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4597'. [ 573.410814][T24444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4597'. [ 573.833166][T24467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4604'. [ 573.906752][T24470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 573.968075][T24470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 574.078395][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4606'. [ 574.115368][T24472] tc_dump_action: action bad kind [ 574.132709][T20424] net_ratelimit: 26 callbacks suppressed [ 574.132727][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 574.263248][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 574.392425][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 574.631475][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 574.781765][T20417] bond2: (slave bridge2): failed to get link speed/duplex [ 574.927967][T24517] netlink: zone id is out of range [ 574.932442][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 574.947451][T24517] netlink: del zone limit has 4 unknown bytes [ 574.966632][T24514] syzkaller0: entered promiscuous mode [ 574.980762][T24514] syzkaller0: entered allmulticast mode [ 575.097341][T24526] bond13 (unregistering): Released all slaves [ 575.341703][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 575.472616][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 575.601294][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 576.270209][T24591] netlink: 'syz.2.4642': attribute type 1 has an invalid length. [ 576.364053][T24595] netlink: 'syz.0.4643': attribute type 1 has an invalid length. [ 576.385376][T24595] netlink: 'syz.0.4643': attribute type 1 has an invalid length. [ 577.131737][T24627] netlink: 'syz.0.4649': attribute type 2 has an invalid length. [ 577.152374][ T5625] block nbd4: Receive control failed (result -32) [ 577.159927][ T5615] block nbd4: Receive control failed (result -32) [ 577.332348][T24642] vlan2: entered promiscuous mode [ 577.368149][ T29] audit: type=1800 audit(1787695233.059:20): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4654" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=1441 res=0 errno=0 [ 577.590915][T24659] netlink: 'syz.0.4658': attribute type 4 has an invalid length. [ 577.847117][T24668] __nla_validate_parse: 14 callbacks suppressed [ 577.847137][T24668] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4662'. [ 577.906342][T24674] tipc: Enabling of bearer rejected, failed to enable media [ 577.945850][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4663'. [ 578.014712][T24674] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4663'. [ 578.280107][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4667'. [ 579.181540][T20426] net_ratelimit: 23 callbacks suppressed [ 579.181561][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 579.257681][T24706] xt_nfacct: accounting object `syz0' does not exist [ 579.335335][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 579.464129][T24720] netlink: 'syz.0.4673': attribute type 16 has an invalid length. [ 579.479122][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 579.612610][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 579.637830][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4675'. [ 579.656476][T24729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4675'. [ 579.733148][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 579.848430][T24735] IPVS: Scheduler module ip_vs_sip not found [ 579.856933][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 579.893346][T24735] netlink: 'syz.0.4677': attribute type 1 has an invalid length. [ 579.965273][T24735] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.977261][T24742] bond7: entered promiscuous mode [ 579.983774][T24742] bond7: entered allmulticast mode [ 580.003018][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 580.015596][T24735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'. [ 580.063681][T24752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4680'. [ 580.125179][T24754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4681'. [ 580.127269][T24752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4680'. [ 580.153443][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 580.302629][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 580.443845][T20419] bond2: (slave bridge2): failed to get link speed/duplex [ 580.815075][T24777] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 580.850386][T24787] vcan0: tx address claim with dest, not broadcast [ 580.874443][T24788] vcan0: tx address claim with dest, not broadcast [ 580.902803][T24787] netlink: 'syz.2.4690': attribute type 34 has an invalid length. [ 581.167915][T24806] syzkaller0: entered promiscuous mode [ 581.182150][T24806] syzkaller0: entered allmulticast mode [ 581.768863][T24826] netlink: 'syz.2.4700': attribute type 2 has an invalid length. [ 581.818313][T24828] syzkaller0: entered promiscuous mode [ 581.849303][T24828] syzkaller0: entered allmulticast mode [ 582.930380][T24847] __nla_validate_parse: 8 callbacks suppressed [ 582.930399][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4707'. [ 582.984048][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4707'. [ 582.998731][T24855] syz.3.4709: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 583.018407][T24855] CPU: 1 UID: 0 PID: 24855 Comm: syz.3.4709 Not tainted syzkaller #0 PREEMPT(full) [ 583.018436][T24855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.018459][T24855] Call Trace: [ 583.018544][T24855] [ 583.018612][T24855] dump_stack_lvl+0xe8/0x150 [ 583.018747][T24855] warn_alloc+0x24c/0x270 [ 583.018811][T24855] ? __pfx_warn_alloc+0x10/0x10 [ 583.018868][T24855] ? xskq_create+0x56/0x220 [ 583.018965][T24855] ? xsk_setsockopt+0x52a/0x960 [ 583.019023][T24855] ? do_syscall_64+0x166/0x520 [ 583.019108][T24855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.019176][T24855] __vmalloc_node_range_noprof+0x12c/0x1730 [ 583.019241][T24855] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.019270][T24855] ? __kmalloc_cache_noprof+0x331/0x660 [ 583.019298][T24855] ? __kmalloc_cache_noprof+0x152/0x660 [ 583.019325][T24855] ? xskq_create+0x56/0x220 [ 583.019352][T24855] xskq_create+0x148/0x220 [ 583.019375][T24855] ? xsk_init_queue+0x8a/0xe0 [ 583.019399][T24855] xsk_init_queue+0x8a/0xe0 [ 583.019424][T24855] xsk_setsockopt+0x52a/0x960 [ 583.019456][T24855] ? __fget_files+0x2a/0x420 [ 583.019499][T24855] ? __pfx_xsk_setsockopt+0x10/0x10 [ 583.019531][T24855] ? __pfx_aa_sk_perm+0x10/0x10 [ 583.019662][T24855] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 583.019701][T24855] ? __pfx_xsk_setsockopt+0x10/0x10 [ 583.019737][T24855] do_sock_setsockopt+0x17c/0x1b0 [ 583.019831][T24855] __x64_sys_setsockopt+0x13d/0x1b0 [ 583.019867][T24855] do_syscall_64+0x166/0x520 [ 583.019891][T24855] ? trace_irq_disable+0x3b/0x140 [ 583.019937][T24855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.019961][T24855] ? clear_bhb_loop+0x70/0xc0 [ 583.019994][T24855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.020017][T24855] RIP: 0033:0x7f8ed759e0d9 [ 583.020077][T24855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.020101][T24855] RSP: 002b:00007f8ed8546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 583.020136][T24855] RAX: ffffffffffffffda RBX: 00007f8ed7825fa0 RCX: 00007f8ed759e0d9 [ 583.020157][T24855] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 583.020178][T24855] RBP: 00007f8ed7635024 R08: 0000000000000004 R09: 0000000000000000 [ 583.020193][T24855] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.020208][T24855] R13: 00007f8ed7826038 R14: 00007f8ed7825fa0 R15: 00007ffd937c1938 [ 583.020246][T24855] [ 583.020287][T24855] Mem-Info: [ 583.291680][T24855] active_anon:8658 inactive_anon:0 isolated_anon:0 [ 583.291680][T24855] active_file:0 inactive_file:43503 isolated_file:0 [ 583.291680][T24855] unevictable:0 dirty:154 writeback:0 [ 583.291680][T24855] slab_reclaimable:12019 slab_unreclaimable:126824 [ 583.291680][T24855] mapped:29698 shmem:528 pagetables:1367 [ 583.291680][T24855] sec_pagetables:0 bounce:0 [ 583.291680][T24855] kernel_misc_reclaimable:0 [ 583.291680][T24855] free:1284128 free_pcp:10224 free_cma:0 [ 583.340854][T24855] Node 0 active_anon:34632kB inactive_anon:0kB active_file:0kB inactive_file:173800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118792kB dirty:612kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17164kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 583.438696][T24860] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 583.443426][T24855] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 583.516907][T24855] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.575897][T24855] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 583.604911][T24855] Node 0 DMA32 free:1167660kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34732kB inactive_anon:0kB active_file:0kB inactive_file:173800kB unevictable:0kB writepending:612kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:41184kB local_pcp:21548kB free_cma:0kB [ 583.675665][T24855] lowmem_reserve[]: 0 0 0 0 0 [ 583.680577][T24855] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.739679][T24855] lowmem_reserve[]: 0 0 0 0 0 [ 583.752774][T24855] Node 1 Normal free:3953992kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.790664][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4714'. [ 583.803270][T24855] lowmem_reserve[]: 0 0 0 0 0 [ 583.813916][T24855] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 583.833121][T24855] Node 0 DMA32: 97*4kB (UM) 299*8kB (UM) 407*16kB (UM) 643*32kB (UM) 441*64kB (UME) 242*128kB (UME) 149*256kB (UM) 65*512kB (UM) 24*1024kB (UM) 10*2048kB (UM) 235*4096kB (UM) = 1168108kB [ 583.852508][T24855] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 583.865751][T24855] Node 1 Normal: 0*4kB 1*8kB (M) 8*16kB (UM) 14*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 963*4096kB (M) = 3953992kB [ 583.900549][T24855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.920532][T24855] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 583.969557][T24855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.992716][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4716'. [ 584.004356][T24855] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.024124][T24855] 44027 total pagecache pages [ 584.040329][T24855] 0 pages in swap cache [ 584.195914][T24855] Free swap = 124996kB [ 584.200287][T24855] Total swap = 124996kB [ 584.210084][T20419] net_ratelimit: 23 callbacks suppressed [ 584.210102][T20419] bond2: (slave bridge2): failed to get link speed/duplex [ 584.224377][T24855] 2097051 pages RAM [ 584.228845][T24855] 0 pages HighMem/MovableOnly [ 584.236262][T24855] 428414 pages reserved [ 584.241361][T24855] 0 pages cma reserved [ 584.317138][T24876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4715'. [ 584.345777][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 584.389337][T24893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4717'. [ 584.405342][T24893] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4717'. [ 584.419612][T24893] netlink: 'syz.3.4717': attribute type 6 has an invalid length. [ 584.432405][T24893] netlink: 'syz.3.4717': attribute type 5 has an invalid length. [ 584.442908][T24893] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4717'. [ 584.461568][T20422] bond2: (slave bridge2): failed to get link speed/duplex [ 584.581465][T20419] bond2: (slave bridge2): failed to get link speed/duplex [ 584.713712][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 584.892794][T20419] bond2: (slave bridge2): failed to get link speed/duplex [ 584.999102][T24907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4722'. [ 585.065293][T24904] Cannot find del_set index 1 as target [ 585.075749][T24907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.100886][T24912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4720'. [ 585.135732][T24907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.189598][T24907] bond0 (unregistering): Released all slaves [ 585.263158][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 585.383447][T20419] bond2: (slave bridge2): failed to get link speed/duplex [ 585.612062][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 585.732105][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 585.977505][T24937] tipc: Enabled bearer , priority 0 [ 586.039793][T24940] netlink: 'syz.4.4729': attribute type 9 has an invalid length. [ 586.084019][T24940] netlink: 'syz.4.4729': attribute type 5 has an invalid length. [ 586.108655][T24943] tipc: Resetting bearer [ 586.444599][T24936] tipc: Disabling bearer [ 586.503165][T24954] netlink: 'syz.0.4734': attribute type 1 has an invalid length. [ 586.557043][T24954] 8021q: adding VLAN 0 to HW filter on device bond8 [ 586.619410][T24954] bond8: (slave veth0_to_bond): making interface the new active one [ 586.675671][T24954] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 586.689883][T24952] syzkaller0: entered promiscuous mode [ 586.704666][T24952] syzkaller0: entered allmulticast mode [ 586.713560][T24957] bond8: entered promiscuous mode [ 586.718642][T24957] veth0_to_bond: entered promiscuous mode [ 586.726018][T24957] bond8: entered allmulticast mode [ 586.731457][T24957] veth0_to_bond: entered allmulticast mode [ 586.745060][T24963] tipc: Started in network mode [ 586.760032][T24963] tipc: Node identity 2604721775f6, cluster identity 4711 [ 586.790729][T24963] tipc: Enabled bearer , priority 0 [ 586.858357][T24961] Cannot find map_set index 65533 as target [ 586.875809][T24954] macvlan2: entered promiscuous mode [ 586.901394][T24954] macvlan2: entered allmulticast mode [ 586.908613][T24954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 586.929156][T24954] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 587.010984][T24968] pimreg9: entered allmulticast mode [ 587.062754][T24951] tipc: Resetting bearer [ 587.145136][T24951] tipc: Disabling bearer [ 587.618288][T25005] netlink: 'syz.4.4744': attribute type 11 has an invalid length. [ 588.068051][T25026] team0: Port device bridge0 added [ 588.234933][T25029] netlink: 'syz.0.4754': attribute type 1 has an invalid length. [ 588.342455][T25037] bond9: (slave veth11): Enslaving as an active interface with a down link [ 588.378346][T25029] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 588.420377][T25029] x_tables: duplicate underflow at hook 2 [ 588.530165][T25042] netlink: 'syz.2.4758': attribute type 62 has an invalid length. [ 588.699956][T25042] __nla_validate_parse: 5 callbacks suppressed [ 588.699975][T25042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4758'. [ 588.823670][T25056] netlink: 209828 bytes leftover after parsing attributes in process `syz.0.4762'. [ 588.853362][T25056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4762'. [ 588.885426][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4764'. [ 589.030945][T25057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.231520][T20422] net_ratelimit: 19 callbacks suppressed [ 589.231540][T20422] bond2: (slave bridge2): failed to get link speed/duplex [ 589.333877][T25078] xt_policy: output policy not valid in PREROUTING and INPUT [ 589.351229][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 589.524846][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 589.655554][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 589.811479][T20422] bond2: (slave bridge2): failed to get link speed/duplex [ 589.846560][T25103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4774'. [ 589.957081][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 590.028128][T25107] syzkaller1: entered promiscuous mode [ 590.044855][T25107] syzkaller1: entered allmulticast mode [ 590.169669][T25120] syzkaller0: entered promiscuous mode [ 590.181154][T25120] syzkaller0: entered allmulticast mode [ 590.221903][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 590.272305][T25112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4778'. [ 590.535270][T25127] pimreg1: port 1(bridge_slave_0) entered disabled state [ 590.578641][T25127] pimreg1: port 2(bridge_slave_1) entered disabled state [ 590.660977][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 590.764717][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 590.891822][T20416] bond2: (slave bridge2): failed to get link speed/duplex [ 591.032222][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 591.801099][T25178] netlink: 'syz.2.4795': attribute type 1 has an invalid length. [ 591.869151][T25185] erspan0: entered promiscuous mode [ 591.888793][T25181] erspan0: left promiscuous mode [ 591.955523][T25190] netlink: 'syz.4.4797': attribute type 39 has an invalid length. [ 592.186031][T25201] netlink: 'syz.3.4800': attribute type 3 has an invalid length. [ 592.207704][T25201] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4800'. [ 592.507651][T25206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.557036][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'. [ 593.008366][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4807'. [ 593.397261][T25245] syzkaller1: entered promiscuous mode [ 593.404732][T25245] syzkaller1: entered allmulticast mode [ 593.406175][T25249] xt_hashlimit: size too large, truncated to 1048576 [ 593.482163][T25249] xt_hashlimit: max too large, truncated to 1048576 [ 596.142553][T20413] net_ratelimit: 16 callbacks suppressed [ 596.142574][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 596.156584][T25255] netlink: 'syz.3.4814': attribute type 1 has an invalid length. [ 596.164693][T25255] __nla_validate_parse: 1 callbacks suppressed [ 596.164711][T25255] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4814'. [ 596.182605][T25255] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 596.382199][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 596.476349][T25292] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4823'. [ 596.543944][T25292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.679178][T25292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.858076][T25292] bond0 (unregistering): Released all slaves [ 597.031972][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 597.055382][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4821'. [ 597.172324][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 597.323992][T20426] bond2: (slave bridge2): failed to get link speed/duplex [ 597.451878][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 597.534897][T25346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 597.582397][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 597.793481][T25346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 597.876684][T25367] RDS: rds_bind could not find a transport for fe80::a8, load rds_tcp or rds_rdma? [ 598.144726][T25375] netlink: 'syz.1.4836': attribute type 2 has an invalid length. [ 598.292350][T20425] bond2: (slave bridge2): failed to get link speed/duplex [ 598.402980][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 598.495434][T25382] netlink: 271 bytes leftover after parsing attributes in process `syz.1.4837'. [ 598.541787][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 598.616416][T25385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4839'. [ 598.844894][T25403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4845'. [ 599.226990][T25424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4851'. [ 599.425705][T25428] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 599.634902][T18779] udevd[18779]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 599.863192][T25415] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.871113][T25415] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.221006][T25415] veth1_to_team: left allmulticast mode [ 600.259965][T25415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.349532][T25415] tipc: Resetting bearer [ 600.362775][T25415] tipc: Resetting bearer [ 600.525093][T25415] tipc: Resetting bearer [ 600.822564][T25415] bond11: left promiscuous mode [ 600.827587][T25415] bond11: left allmulticast mode [ 600.862890][T25414] batman_adv: batadv0: Adding interface: gretap2 [ 600.870853][T25414] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.897824][T25414] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 600.922988][ T791] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.944848][ T791] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.081591][T20422] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.113129][T20422] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.180773][T25443] ovs-s!!: entered promiscuous mode [ 601.192197][T20424] net_ratelimit: 5 callbacks suppressed [ 601.192213][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 601.204430][T25455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4857'. [ 601.235006][T25455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4857'. [ 601.307403][T25459] netlink: 'syz.4.4859': attribute type 1 has an invalid length. [ 601.392017][T25457] rdma_op ffff888063b7b238 conn xmit_rdma 0000000000000000 [ 601.468217][T25459] bond4: entered promiscuous mode [ 601.475863][T25459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.484107][T25465] tipc: Enabling of bearer rejected, failed to enable media [ 601.510811][T25470] macvtap1: entered allmulticast mode [ 601.615325][T25459] bond4: (slave bridge2): making interface the new active one [ 601.646614][T25459] bridge2: entered promiscuous mode [ 601.674292][T25459] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 601.706063][T25479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4865'. [ 601.722422][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 601.733833][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 601.747017][T25480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4865'. [ 601.756525][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 601.766891][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 601.800173][T20422] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.833484][T20422] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.851349][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.868233][T25476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4864'. [ 601.879118][T25481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4864'. [ 601.888913][T20422] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.905783][T20422] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.931350][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 602.089033][T25484] syzkaller0: entered promiscuous mode [ 602.095258][T25484] syzkaller0: entered allmulticast mode [ 602.147913][T25496] netlink: 'syz.3.4869': attribute type 4 has an invalid length. [ 602.454746][T25505] netlink: 'syz.3.4871': attribute type 2 has an invalid length. [ 604.158785][T25455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.614082][T25505] : entered promiscuous mode [ 604.631926][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 604.822120][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 604.834660][T25523] syzkaller0: entered promiscuous mode [ 604.865754][T25523] syzkaller0: entered allmulticast mode [ 604.881212][T25527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.939273][T25527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.965215][T25527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.989733][T25527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.205941][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 605.228429][T25535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.246870][T25535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.273765][T25535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.313110][T25535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.326219][T25535] batman_adv: batadv0: Removing interface: gretap2 [ 605.453191][ T791] bond2: (slave bridge2): failed to get link speed/duplex [ 606.047044][T20422] bond2: (slave bridge2): failed to get link speed/duplex [ 606.161561][T20415] bond2: (slave bridge2): failed to get link speed/duplex [ 606.281912][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 606.347435][T25583] __nla_validate_parse: 6 callbacks suppressed [ 606.347454][T25583] netlink: 296 bytes leftover after parsing attributes in process `syz.4.4892'. [ 606.378232][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4893'. [ 606.400618][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 606.407327][T25587] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4893'. [ 606.423490][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 606.436604][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 606.449083][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 606.468933][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 606.488171][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 606.518158][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 606.565593][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 606.616478][T25586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.816883][T25586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.913232][T25595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.952465][T20424] bond2: (slave bridge2): failed to get link speed/duplex [ 607.063290][ T8380] bond2: (slave bridge2): failed to get link speed/duplex [ 607.194806][T20422] bond2: (slave bridge2): failed to get link speed/duplex [ 607.275716][T25618] FAULT_INJECTION: forcing a failure. [ 607.275716][T25618] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 607.298707][T25618] CPU: 0 UID: 0 PID: 25618 Comm: syz.1.4902 Not tainted syzkaller #0 PREEMPT(full) [ 607.298729][T25618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.298739][T25618] Call Trace: [ 607.298746][T25618] [ 607.298753][T25618] dump_stack_lvl+0xe8/0x150 [ 607.298780][T25618] should_fail_ex+0x410/0x560 [ 607.298915][T25618] _copy_from_user+0x2d/0xb0 [ 607.298957][T25618] core_sys_select+0x671/0xb40 [ 607.298976][T25618] ? get_pid_task+0x20/0x1f0 [ 607.299026][T25618] ? __pfx_core_sys_select+0x10/0x10 [ 607.299069][T25618] ? __pfx_set_user_sigmask+0x10/0x10 [ 607.299093][T25618] ? kmem_cache_free+0x182/0x650 [ 607.299119][T25618] __se_sys_pselect6+0x267/0x320 [ 607.299142][T25618] ? __pfx___se_sys_pselect6+0x10/0x10 [ 607.299160][T25618] ? __pfx_ksys_write+0x10/0x10 [ 607.299197][T25618] ? __x64_sys_pselect6+0x21/0xf0 [ 607.299218][T25618] do_syscall_64+0x166/0x520 [ 607.299235][T25618] ? trace_irq_disable+0x3b/0x140 [ 607.299255][T25618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.299270][T25618] ? clear_bhb_loop+0x70/0xc0 [ 607.299288][T25618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.299304][T25618] RIP: 0033:0x7f94b099e0d9 [ 607.299319][T25618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.299332][T25618] RSP: 002b:00007f94b1840028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 607.299348][T25618] RAX: ffffffffffffffda RBX: 00007f94b0c25fa0 RCX: 00007f94b099e0d9 [ 607.299359][T25618] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000040 [ 607.299369][T25618] RBP: 00007f94b1840090 R08: 0000000000000000 R09: 0000000000000000 [ 607.299379][T25618] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 607.299388][T25618] R13: 00007f94b0c26038 R14: 00007f94b0c25fa0 R15: 00007ffd813b96d8 [ 607.299412][T25618] [ 607.494346][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 607.613626][T20413] bond2: (slave bridge2): failed to get link speed/duplex [ 607.879304][T25621] bridge0: port 1(syz_tun) entered disabled state [ 608.208583][T25621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.224852][T25621] veth0_to_hsr: left promiscuous mode [ 608.241270][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 608.379075][T25621] geneve2: left promiscuous mode [ 608.496563][ T8380] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.507652][ T8380] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.520766][ T8380] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 36539 - 0 [ 608.530824][ T8380] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 608.540759][T25650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.571670][T25653] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 608.631613][T20422] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.655662][T20422] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.681737][T20422] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 36539 - 0 [ 608.717344][T20422] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 608.741467][T20422] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.765734][T20422] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.805631][T20422] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 36539 - 0 [ 608.843241][T25662] netlink: 'syz.1.4916': attribute type 1 has an invalid length. [ 608.845377][T20422] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 608.879961][T20422] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.916099][T20422] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.936246][T20422] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 36539 - 0 [ 608.953112][T20422] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 609.030626][T25662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.067983][T25671] bond0: entered promiscuous mode [ 609.076824][T25673] IPVS: set_ctl: invalid protocol: 57185 0.225.17.1:65152 [ 609.087392][T25671] bond0: entered allmulticast mode [ 609.169950][T25669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.257782][T25662] bond0: (slave dummy0): making interface the new active one [ 609.267672][T25662] dummy0: entered promiscuous mode [ 609.279476][T25662] dummy0: entered allmulticast mode [ 609.312084][T25662] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 609.933957][T25717] xt_ipcomp: unknown flags 1D [ 610.138414][T25721] syzkaller1: entered promiscuous mode [ 610.165168][T25721] syzkaller1: entered allmulticast mode [ 610.444466][T25726] syzkaller0: entered promiscuous mode [ 610.494033][T25726] syzkaller0: entered allmulticast mode [ 613.444611][T25779] __nla_validate_parse: 105 callbacks suppressed [ 613.444631][T25779] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4947'. [ 613.715143][T25789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4949'. [ 614.484125][T25826] tipc: Enabled bearer , priority 0 [ 614.528969][T25826] syzkaller0: mtu less than device minimum [ 614.617092][T25835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4961'. [ 614.666163][T25836] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4960'. [ 614.839727][T25847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4962'. [ 615.490183][T25867] macsec1: entered allmulticast mode [ 615.502292][T25867] veth1_macvtap: entered allmulticast mode [ 615.513414][T25867] veth1_macvtap: left allmulticast mode [ 615.579411][T25865] macsec1: entered allmulticast mode [ 615.604906][T25865] veth1_macvtap: entered allmulticast mode [ 615.651895][T25865] veth1_macvtap: left allmulticast mode [ 615.799444][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4972'. [ 615.970723][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4973'. [ 615.996140][T25885] netlink: 'syz.1.4973': attribute type 5 has an invalid length. [ 616.010348][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4973'. [ 616.037185][T25886] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4974'. [ 616.048142][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4973'. [ 616.085598][T25889] netlink: 'syz.1.4973': attribute type 5 has an invalid length. [ 616.164973][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 616.196281][T25895] tipc: New replicast peer: 255.255.255.255 [ 616.215295][T25895] tipc: Enabled bearer , priority 26 [ 616.316756][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 616.318781][T25895] netlink: 'syz.2.4976': attribute type 10 has an invalid length. [ 616.362658][T25895] bond1: (slave team0): Releasing active interface [ 616.394166][T25904] netlink: NAT attribute has 1 unknown bytes [ 616.407284][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 616.414626][T25904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.727869][T25921] bridge_slave_0: left allmulticast mode [ 616.763546][T25921] bridge_slave_0: left promiscuous mode [ 616.776661][T25921] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.814713][T25921] bridge_slave_1: left allmulticast mode [ 616.820744][T25921] bridge_slave_1: left promiscuous mode [ 616.827494][T25921] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.858828][T25921] bond0: (slave bond_slave_0): Releasing backup interface [ 616.888545][T25921] bond0: (slave bond_slave_1): Releasing backup interface [ 616.953759][T25921] team0: Port device team_slave_0 removed [ 616.998413][T25921] team0: Port device team_slave_1 removed [ 617.030064][T25921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.313328][T25891] infiniband syz0: set down [ 617.326198][T13298] xfrm0 speed is unknown, defaulting to 1000 [ 617.333496][T25891] infiniband syz0: added xfrm0 [ 617.343085][T25949] ipt_rpfilter: unknown options [ 617.450980][T25891] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 617.520634][T25891] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 617.540133][T25891] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 617.602299][T25891] RDS/IB: syz0: added [ 617.609337][T25891] smc: adding ib device syz0 with port count 1 [ 617.616550][T25891] smc: ib device syz0 port 1 has no pnetid [ 617.625843][ T187] xfrm0 speed is unknown, defaulting to 1000 [ 617.632726][T25958] x_tables: duplicate underflow at hook 1 [ 617.661534][T25954] xt_hashlimit: size too large, truncated to 1048576 [ 617.673069][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 617.847323][T25967] netlink: 'syz.4.4992': attribute type 6 has an invalid length. [ 618.262076][T25984] vxcan2: entered allmulticast mode [ 618.455196][T25998] netlink: 'syz.1.4999': attribute type 9 has an invalid length. [ 618.493950][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 618.847020][T26017] __nla_validate_parse: 9 callbacks suppressed [ 618.847038][T26017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5006'. [ 618.941673][T26017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.093600][T26027] netlink: 'syz.1.5007': attribute type 2 has an invalid length. [ 619.267624][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 619.283654][T26027] þ: entered promiscuous mode [ 619.514824][T26039] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5013'. [ 619.530315][T26042] netlink: 'syz.3.5011': attribute type 21 has an invalid length. [ 619.576790][T26042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5011'. [ 619.946612][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 620.028604][T26058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5018'. [ 620.104964][T26060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5019'. [ 620.126856][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5019'. [ 620.423983][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 620.888732][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5027'. [ 621.216156][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 621.731428][T26126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'. [ 621.756194][T26126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5035'. [ 621.780651][T26124] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5037'. [ 621.851395][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 622.095057][T26129] nbd5: detected capacity change from 0 to 127 [ 622.323717][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 622.490107][ T5625] block nbd5: Receive control failed (result -104) [ 622.750050][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 623.050466][T26166] netlink: 'syz.0.5046': attribute type 3 has an invalid length. [ 623.079280][T26155] [ 623.081663][T26155] ====================================================== [ 623.088734][T26155] WARNING: possible circular locking dependency detected [ 623.095890][T26155] syzkaller #0 Not tainted [ 623.100338][T26155] ------------------------------------------------------ [ 623.107425][T26155] syz.1.5045/26155 is trying to acquire lock: [ 623.113515][T26155] ffffffff8ec8c680 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 623.122931][T26155] [ 623.122931][T26155] but task is already holding lock: [ 623.130315][T26155] ffffffff8f5e91a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 623.139305][T26155] [ 623.139305][T26155] which lock already depends on the new lock. [ 623.139305][T26155] [ 623.149730][T26155] [ 623.149730][T26155] the existing dependency chain (in reverse order) is: [ 623.158766][T26155] [ 623.158766][T26155] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 623.166008][T26155] __mutex_lock+0x19d/0x1550 [ 623.171191][T26155] get_device_parent+0x16f/0x3a0 [ 623.176685][T26155] device_add+0x2d4/0xb80 [ 623.181569][T26155] device_create+0x269/0x300 [ 623.186713][T26155] msr_device_create+0x33/0x50 [ 623.192057][T26155] cpuhp_invoke_callback+0x434/0x810 [ 623.197880][T26155] cpuhp_thread_fun+0x362/0x780 [ 623.203268][T26155] smpboot_thread_fn+0x565/0xa70 [ 623.208748][T26155] kthread+0x38b/0x480 [ 623.213351][T26155] ret_from_fork+0x514/0xb70 [ 623.218574][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.223891][T26155] [ 623.223891][T26155] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 623.231499][T26155] cpuhp_thread_fun+0x127/0x780 [ 623.236893][T26155] smpboot_thread_fn+0x565/0xa70 [ 623.242370][T26155] kthread+0x38b/0x480 [ 623.246996][T26155] ret_from_fork+0x514/0xb70 [ 623.252139][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.257449][T26155] [ 623.257449][T26155] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 623.265201][T26155] cpus_read_lock+0x42/0x160 [ 623.270324][T26155] static_key_slow_inc+0x12/0x30 [ 623.275826][T26155] ipv6_flowlabel_opt+0x1cb1/0x2ae0 [ 623.281635][T26155] do_ipv6_setsockopt+0xdff/0x3180 [ 623.287330][T26155] ipv6_setsockopt+0x59/0x170 [ 623.292546][T26155] do_sock_setsockopt+0x17c/0x1b0 [ 623.298114][T26155] __x64_sys_setsockopt+0x13d/0x1b0 [ 623.303852][T26155] do_syscall_64+0x166/0x520 [ 623.308984][T26155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.315411][T26155] [ 623.315411][T26155] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 623.323168][T26155] lock_sock_nested+0x41/0x100 [ 623.328546][T26155] inet_shutdown+0x6a/0x390 [ 623.333623][T26155] nbd_mark_nsock_dead+0x2cb/0x550 [ 623.339316][T26155] recv_work+0x1cee/0x1e10 [ 623.344272][T26155] process_scheduled_works+0xa88/0x14c0 [ 623.350435][T26155] worker_thread+0xa47/0xfb0 [ 623.355565][T26155] kthread+0x38b/0x480 [ 623.360175][T26155] ret_from_fork+0x514/0xb70 [ 623.365300][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.370608][T26155] [ 623.370608][T26155] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 623.378287][T26155] __mutex_lock+0x19d/0x1550 [ 623.383413][T26155] nbd_queue_rq+0x373/0x1150 [ 623.388544][T26155] blk_mq_dispatch_rq_list+0x499/0x1990 [ 623.394701][T26155] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 623.401607][T26155] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 623.408116][T26155] blk_mq_run_work_fn+0x16c/0x300 [ 623.413715][T26155] process_scheduled_works+0xa88/0x14c0 [ 623.419810][T26155] worker_thread+0xa47/0xfb0 [ 623.424946][T26155] kthread+0x38b/0x480 [ 623.429576][T26155] ret_from_fork+0x514/0xb70 [ 623.434706][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.440017][T26155] [ 623.440017][T26155] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 623.447245][T26155] __mutex_lock+0x19d/0x1550 [ 623.452369][T26155] nbd_queue_rq+0xc1/0x1150 [ 623.457419][T26155] blk_mq_dispatch_rq_list+0x499/0x1990 [ 623.463536][T26155] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 623.470450][T26155] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 623.476966][T26155] blk_mq_run_work_fn+0x16c/0x300 [ 623.482532][T26155] process_scheduled_works+0xa88/0x14c0 [ 623.488605][T26155] worker_thread+0xa47/0xfb0 [ 623.493742][T26155] kthread+0x38b/0x480 [ 623.498346][T26155] ret_from_fork+0x514/0xb70 [ 623.503646][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.508964][T26155] [ 623.508964][T26155] -> #3 (set->srcu){.+.+}-{0:0}: [ 623.516119][T26155] __synchronize_srcu+0xc9/0x2f0 [ 623.521655][T26155] elevator_switch+0x1e8/0x7b0 [ 623.527056][T26155] elevator_change+0x2fa/0x480 [ 623.532369][T26155] elevator_set_default+0x375/0x440 [ 623.538115][T26155] blk_register_queue+0x3f3/0x4e0 [ 623.543725][T26155] __add_disk+0x6cb/0xe30 [ 623.548587][T26155] add_disk_fwnode+0x100/0x3a0 [ 623.553887][T26155] nbd_dev_add+0x733/0xb60 [ 623.558843][T26155] nbd_init+0x15f/0x1e0 [ 623.563602][T26155] do_one_initcall+0x250/0x870 [ 623.568924][T26155] do_initcall_level+0x10a/0x1a0 [ 623.574399][T26155] do_initcalls+0x59/0xa0 [ 623.579269][T26155] kernel_init_freeable+0x29d/0x3e0 [ 623.585009][T26155] kernel_init+0x22/0x1d0 [ 623.589885][T26155] ret_from_fork+0x514/0xb70 [ 623.595024][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.600333][T26155] [ 623.600333][T26155] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 623.608190][T26155] __mutex_lock+0x19d/0x1550 [ 623.613324][T26155] elevator_change+0x1af/0x480 [ 623.618626][T26155] elevator_set_none+0xb5/0x140 [ 623.624014][T26155] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 623.630354][T26155] nbd_start_device+0x189/0xb30 [ 623.635754][T26155] nbd_genl_connect+0x1597/0x1c10 [ 623.641320][T26155] genl_family_rcv_msg_doit+0x233/0x340 [ 623.647485][T26155] genl_rcv_msg+0x614/0x7a0 [ 623.652535][T26155] netlink_rcv_skb+0x226/0x4a0 [ 623.657833][T26155] genl_rcv+0x28/0x40 [ 623.662355][T26155] netlink_unicast+0x7bd/0x940 [ 623.667733][T26155] netlink_sendmsg+0x813/0xb40 [ 623.673033][T26155] sock_sendmsg_nosec+0x13a/0x180 [ 623.678699][T26155] ____sys_sendmsg+0x54e/0x850 [ 623.684010][T26155] ___sys_sendmsg+0x2a5/0x360 [ 623.689226][T26155] __x64_sys_sendmsg+0x1b1/0x290 [ 623.694726][T26155] do_syscall_64+0x166/0x520 [ 623.699900][T26155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.706324][T26155] [ 623.706324][T26155] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 623.714972][T26155] blk_alloc_queue+0x544/0x690 [ 623.720271][T26155] __blk_mq_alloc_disk+0x194/0x390 [ 623.725913][T26155] nbd_dev_add+0x494/0xb60 [ 623.730873][T26155] nbd_init+0x15f/0x1e0 [ 623.735573][T26155] do_one_initcall+0x250/0x870 [ 623.740884][T26155] do_initcall_level+0x10a/0x1a0 [ 623.746349][T26155] do_initcalls+0x59/0xa0 [ 623.751211][T26155] kernel_init_freeable+0x29d/0x3e0 [ 623.756946][T26155] kernel_init+0x22/0x1d0 [ 623.761816][T26155] ret_from_fork+0x514/0xb70 [ 623.766958][T26155] ret_from_fork_asm+0x1a/0x30 [ 623.772263][T26155] [ 623.772263][T26155] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 623.779505][T26155] __lock_acquire+0x1520/0x2cf0 [ 623.784924][T26155] lock_acquire+0x106/0x350 [ 623.789967][T26155] fs_reclaim_acquire+0x71/0x100 [ 623.795437][T26155] __kmalloc_cache_noprof+0x61/0x660 [ 623.801259][T26155] get_device_parent+0x255/0x3a0 [ 623.806743][T26155] device_add+0x2d4/0xb80 [ 623.811612][T26155] device_create+0x269/0x300 [ 623.816782][T26155] macvtap_device_event+0x2dc/0x400 [ 623.822603][T26155] notifier_call_chain+0x1a5/0x3d0 [ 623.828294][T26155] __dev_change_net_namespace+0x18af/0x1de0 [ 623.834788][T26155] do_setlink+0x2d1/0x4670 [ 623.839810][T26155] rtnl_newlink+0x15a3/0x1c30 [ 623.845060][T26155] rtnetlink_rcv_msg+0x802/0xc00 [ 623.850549][T26155] netlink_rcv_skb+0x226/0x4a0 [ 623.855847][T26155] netlink_unicast+0x7bd/0x940 [ 623.861178][T26155] netlink_sendmsg+0x813/0xb40 [ 623.866500][T26155] sock_sendmsg_nosec+0x13a/0x180 [ 623.872072][T26155] ____sys_sendmsg+0x54e/0x850 [ 623.877394][T26155] ___sys_sendmsg+0x2a5/0x360 [ 623.882624][T26155] __x64_sys_sendmsg+0x1b1/0x290 [ 623.888122][T26155] do_syscall_64+0x166/0x520 [ 623.893260][T26155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.899690][T26155] [ 623.899690][T26155] other info that might help us debug this: [ 623.899690][T26155] [ 623.910045][T26155] Chain exists of: [ 623.910045][T26155] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 623.910045][T26155] [ 623.922070][T26155] Possible unsafe locking scenario: [ 623.922070][T26155] [ 623.929557][T26155] CPU0 CPU1 [ 623.934933][T26155] ---- ---- [ 623.940306][T26155] lock(gdp_mutex); [ 623.944210][T26155] lock(cpuhp_state-up); [ 623.951082][T26155] lock(gdp_mutex); [ 623.957512][T26155] lock(fs_reclaim); [ 623.961517][T26155] [ 623.961517][T26155] *** DEADLOCK *** [ 623.961517][T26155] [ 623.969671][T26155] locks held by syz.1.5045/26155: 2, last CPU#1: [ 623.976087][T26155] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 623.985212][T26155] #1: ffffffff8f5e91a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 623.994552][T26155] [ 623.994552][T26155] stack backtrace: [ 624.000449][T26155] CPU: 1 UID: 0 PID: 26155 Comm: syz.1.5045 Not tainted syzkaller #0 PREEMPT(full) [ 624.000474][T26155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.000487][T26155] Call Trace: [ 624.000496][T26155] [ 624.000506][T26155] dump_stack_lvl+0xe8/0x150 [ 624.000531][T26155] print_circular_bug+0x2e1/0x300 [ 624.000550][T26155] check_noncircular+0x12e/0x150 [ 624.000568][T26155] __lock_acquire+0x1520/0x2cf0 [ 624.000596][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.000619][T26155] ? trace_contention_end+0x3d/0x140 [ 624.000636][T26155] ? __kmalloc_cache_noprof+0x61/0x660 [ 624.000655][T26155] lock_acquire+0x106/0x350 [ 624.000682][T26155] ? __kmalloc_cache_noprof+0x61/0x660 [ 624.000706][T26155] fs_reclaim_acquire+0x71/0x100 [ 624.000724][T26155] ? __kmalloc_cache_noprof+0x61/0x660 [ 624.000742][T26155] __kmalloc_cache_noprof+0x61/0x660 [ 624.000761][T26155] ? get_device_parent+0x255/0x3a0 [ 624.000783][T26155] ? get_device_parent+0x255/0x3a0 [ 624.000807][T26155] get_device_parent+0x255/0x3a0 [ 624.000830][T26155] device_add+0x2d4/0xb80 [ 624.000853][T26155] device_create+0x269/0x300 [ 624.000878][T26155] ? tap_get_minor+0x24/0x2e0 [ 624.000945][T26155] ? __pfx_device_create+0x10/0x10 [ 624.000969][T26155] ? tap_get_minor+0x24/0x2e0 [ 624.000983][T26155] ? tap_get_minor+0x24/0x2e0 [ 624.000997][T26155] ? tap_get_minor+0x24/0x2e0 [ 624.001012][T26155] ? tap_get_minor+0x274/0x2e0 [ 624.001027][T26155] macvtap_device_event+0x2dc/0x400 [ 624.001054][T26155] ? __pfx_ipvlan_device_event+0x10/0x10 [ 624.001124][T26155] ? __pfx_macvtap_device_event+0x10/0x10 [ 624.001151][T26155] ? ipmr_device_event+0x1f6/0x220 [ 624.001209][T26155] notifier_call_chain+0x1a5/0x3d0 [ 624.001239][T26155] __dev_change_net_namespace+0x18af/0x1de0 [ 624.001265][T26155] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 624.001285][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.001310][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.001333][T26155] ? __schedule+0x17ea/0x5630 [ 624.001352][T26155] ? unwind_next_frame+0x8f/0x2550 [ 624.001370][T26155] ? is_bpf_text_address+0x26/0x2b0 [ 624.001400][T26155] ? is_bpf_text_address+0x26/0x2b0 [ 624.001452][T26155] ? is_bpf_text_address+0x292/0x2b0 [ 624.001477][T26155] ? validate_linkmsg+0x765/0x950 [ 624.001498][T26155] do_setlink+0x2d1/0x4670 [ 624.001523][T26155] ? unwind_get_return_address+0x4d/0x90 [ 624.001538][T26155] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.001572][T26155] ? __pfx_do_setlink+0x10/0x10 [ 624.001596][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.001624][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.001648][T26155] ? kasan_save_track+0x3e/0x80 [ 624.001667][T26155] ? __kasan_kmalloc+0x93/0xb0 [ 624.001693][T26155] ? __kmalloc_cache_noprof+0x331/0x660 [ 624.001717][T26155] ? __mutex_trylock_common+0x15f/0x270 [ 624.001735][T26155] ? __pfx___mutex_trylock_common+0x10/0x10 [ 624.001753][T26155] ? rcu_is_watching+0x16/0xb0 [ 624.001769][T26155] ? trace_contention_end+0x3d/0x140 [ 624.001787][T26155] ? __mutex_lock+0x30b/0x1550 [ 624.001806][T26155] ? __fget_files+0x2a/0x420 [ 624.001833][T26155] ? rtnl_newlink+0xc10/0x1c30 [ 624.001855][T26155] ? __pfx___mutex_lock+0x10/0x10 [ 624.001878][T26155] ? ns_capable+0x89/0xe0 [ 624.001897][T26155] ? rtnl_nets_add+0x16c/0x300 [ 624.001931][T26155] ? refcount_inc+0x46/0x70 [ 624.001950][T26155] rtnl_newlink+0x15a3/0x1c30 [ 624.001976][T26155] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.001997][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.002022][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.002046][T26155] ? kernel_text_address+0xa5/0xe0 [ 624.002060][T26155] ? __kernel_text_address+0xd/0x30 [ 624.002076][T26155] ? unwind_next_frame+0x8f/0x2550 [ 624.002093][T26155] ? is_bpf_text_address+0x26/0x2b0 [ 624.002140][T26155] ? is_bpf_text_address+0x26/0x2b0 [ 624.002168][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.002194][T26155] ? kernel_text_address+0xa5/0xe0 [ 624.002209][T26155] ? __kernel_text_address+0xd/0x30 [ 624.002224][T26155] ? unwind_get_return_address+0x4d/0x90 [ 624.002240][T26155] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.002262][T26155] ? arch_stack_walk+0xfb/0x150 [ 624.002282][T26155] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.002305][T26155] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.002334][T26155] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.002356][T26155] rtnetlink_rcv_msg+0x802/0xc00 [ 624.002378][T26155] ? netlink_sendmsg+0x5d4/0xb40 [ 624.002396][T26155] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 624.002418][T26155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.002441][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.002469][T26155] netlink_rcv_skb+0x226/0x4a0 [ 624.002485][T26155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.002508][T26155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.002528][T26155] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.002543][T26155] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.002561][T26155] netlink_unicast+0x7bd/0x940 [ 624.002589][T26155] netlink_sendmsg+0x813/0xb40 [ 624.002610][T26155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.002627][T26155] ? aa_sock_msg_perm+0xf6/0x1c0 [ 624.002656][T26155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.002671][T26155] sock_sendmsg_nosec+0x13a/0x180 [ 624.002698][T26155] ____sys_sendmsg+0x54e/0x850 [ 624.002725][T26155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.002754][T26155] ? import_iovec+0x73/0xa0 [ 624.002809][T26155] ___sys_sendmsg+0x2a5/0x360 [ 624.002834][T26155] ? __lock_acquire+0x683/0x2cf0 [ 624.002859][T26155] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.002885][T26155] ? futex_wait+0x2a2/0x390 [ 624.002923][T26155] ? __fget_files+0x2a/0x420 [ 624.002946][T26155] ? __fget_files+0x3a2/0x420 [ 624.002972][T26155] __x64_sys_sendmsg+0x1b1/0x290 [ 624.002999][T26155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.003034][T26155] do_syscall_64+0x166/0x520 [ 624.003052][T26155] ? trace_irq_disable+0x3b/0x140 [ 624.003074][T26155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.003091][T26155] ? clear_bhb_loop+0x70/0xc0 [ 624.003110][T26155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.003126][T26155] RIP: 0033:0x7f94b099e0d9 [ 624.003143][T26155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.003159][T26155] RSP: 002b:00007f94b1840028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.003177][T26155] RAX: ffffffffffffffda RBX: 00007f94b0c25fa0 RCX: 00007f94b099e0d9 [ 624.003190][T26155] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 000000000000000a [ 624.003201][T26155] RBP: 00007f94b0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 624.003211][T26155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.003222][T26155] R13: 00007f94b0c26038 R14: 00007f94b0c25fa0 R15: 00007ffd813b96d8 [ 624.003242][T26155] [ 624.654805][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 625.461207][ T1738] block nbd5: Connection timed out, retrying (0/1 alive) [ 625.468459][ T1738] block nbd5: Connection timed out, retrying (0/1 alive) [ 625.475718][ T1738] block nbd5: Connection timed out, retrying (0/1 alive) [ 625.482894][ T1738] block nbd5: Connection timed out, retrying (0/1 alive) [ 625.490012][ T11] block nbd5: Dead connection, failed to find a fallback [ 625.497157][ T11] block nbd5: shutting down sockets [ 625.502579][ T11] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 625.512332][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 625.520106][ T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 625.529739][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 625.537722][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 625.547333][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 625.555128][ T11] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 625.564693][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 625.572691][ T1749] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 625.582916][ T1749] Buffer I/O error on dev nbd5, logical block 0, async page read [ 625.590677][ T1749] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 625.600635][ T1749] Buffer I/O error on dev nbd5, logical block 1, async page read [ 625.608815][ T1749] Buffer I/O error on dev nbd5, logical block 2, async page read [ 625.617215][ T1749] Buffer I/O error on dev nbd5, logical block 3, async page read [ 625.625481][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 625.635102][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 625.643047][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 625.650904][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 625.660685][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 625.670277][ T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 625.680701][T18779] ldm_validate_partition_table(): Disk read failed. [ 625.688860][T18779] Dev nbd5: unable to read RDB block 0 [ 625.702025][T18779] nbd5: unable to read partition table [ 625.713552][T18779] ldm_validate_partition_table(): Disk read failed. [ 625.720843][T18779] Dev nbd5: unable to read RDB block 0 [ 625.727238][T18779] nbd5: unable to read partition table